CISSP QUESTIONS - ACCESS CONTROL
FUNDAMENTALS QUESTIONS AND
ANSWERS WITH SOLUTIONS 2024
______ requires that a user or process should be granted access to only those resources necessary to
perform assigned functions. - ANSWER Least Privilege
A client presents a certificate to a web server at logon. The server determines that the certificate hasn't
expired. What service will the server use to verify that the certificate has not been revoked?
OCSP
OSPF
SNMP
TLS 1.1 - ANSWER OCSP; OCSP is the online Certificate Status Protocol.
(SNMP is Simple Network Management Protocol
TLS 1.1 is transport Layer Security)
Which of the following is NOT an example of Administrative security controls?
Training
ACLs
Policies
Job Rotation - ANSWER ACLs; ACLs or Access Control List are considered Technical Security Controls. All
others are administrative security controls
Which of the following is true of two-factor authentication?
-It uses the RSA public-key signature based on integers with large prime factors.
-It requires two measurements of hand geometry.
-It relies on two independent proofs of identity.
-It does use single sign on technology. - ANSWER It relies on two independent proofs of identity.
FUNDAMENTALS QUESTIONS AND
ANSWERS WITH SOLUTIONS 2024
______ requires that a user or process should be granted access to only those resources necessary to
perform assigned functions. - ANSWER Least Privilege
A client presents a certificate to a web server at logon. The server determines that the certificate hasn't
expired. What service will the server use to verify that the certificate has not been revoked?
OCSP
OSPF
SNMP
TLS 1.1 - ANSWER OCSP; OCSP is the online Certificate Status Protocol.
(SNMP is Simple Network Management Protocol
TLS 1.1 is transport Layer Security)
Which of the following is NOT an example of Administrative security controls?
Training
ACLs
Policies
Job Rotation - ANSWER ACLs; ACLs or Access Control List are considered Technical Security Controls. All
others are administrative security controls
Which of the following is true of two-factor authentication?
-It uses the RSA public-key signature based on integers with large prime factors.
-It requires two measurements of hand geometry.
-It relies on two independent proofs of identity.
-It does use single sign on technology. - ANSWER It relies on two independent proofs of identity.
