Access Controls Review Practice Test.

Access Controls Review Practice Test. With regard to DAC (Discretionary Access Control), which of the following statements are true? Files that don't have an owner CANNOT be modified. The administrator of the system is an owner of each object. The operating system is an owner of each object. Each object has an owner, which has full control over the object. none of the above - CORRECT ANSWER Each object has an owner, which has full control over the object. Which of the following access control methods relies on user security clearance and data classification? RBAC (Role Based Access Control). NDAC (Non-Discretionary Access Control). MAC (Mandatory Access Control). DAC (Discretionary Access Control). - CORRECT ANSWER MAC (Mandatory Access Control). examples of Administrative preventative controls (choose all that apply) Risk Assessment Separation of duties Job Rotation Pre-employment background checks Incident response - CORRECT ANSWER Risk Assessment Separation of duties Pre-employment background checks Which of the following best describes an access control mechanism in which access control decisions are based on the responsibilities that an individual user or process has in an organization? MAC (Mandatory Access Control) RBAC (Role Based Access Control) DAC (Discretionary Access Control) None of the above. - CORRECT ANSWER RBAC (Role Based Access Control) Least privilege is: Denying all access Failing closed DAC Limiting users and processes to access only resources necessary to perform assigned functions RBAC - CORRECT ANSWER Limiting users and processes to access only resources necessary to perform assigned functions