IT330 Final Exam with COMPLETE SOLUTION | 100% Correct Answers

All of the following are typical RACF security services, except? A. Identifies logon users via a USERID and password B. Each RACF USERID has a unique password C. Password is one way encrypted so no one else can get your password, not even the administrator D. Prevents connections from outside the network to access sensitive applications - firewall. E. A USERID is revoked after a preset number of invalid password attempts Correct Answer: D In RACF, a _____________ describes the security characteristics of a user, a group, or resource. A. user account B. security entry C. profile D. SAF Correct Answer: C In order for a resource to be RACF-protected, it must A. have a RACF profile B. have a password C. limit access to local connections D. define users and groups who may access the resource Correct Answer: A The security role which is responsible for reviewing security policy, violation and exposures is ______. A. Security administrator B. Security auditor C. System operator D. Systems programmer E. System Administrator Correct Answer: B Which of the following statements BEST describes z/OS's storage protection function? A. Limit access to sensitive datasets and libraries to authorized users and programs. B. Prevents unauthorized reading or alteration of storage C. Protects virtual address spaces from unauthorized access or alteration. D. Encrypts removable storage devices using the storage protection key. Correct Answer: B Which of the following statements BEST describes the concept of "console security"? A. Specifies which z/OS commands operators can execute at a designated console. B. Specifies z/OS USERIDS may login to a designated console. C. Specifies groups and userids that logon to a designated console. D. Specifies the time of day one may logon to a designated console. E. All of answers are correct. Correct