Question 1

Which access control model that uses access based on a user's job function within an organization?

Accepted Answer

A)  Role Based Access Control
B)  Rule Based Access Control
C)  Discretionary Access Control
D)  Mandatory Access ControlE) None of the above
F) A) and B)

Question 2

A Local Group Policy (LGP)has more options than a Group Policy.

Accepted Answer

A) True 
 B)False

Question 3

What kind of attack allows for the construction of LDAP statements based on user input statements,which can then be used to access the LDAP database or modify the database's information?

Accepted Answer

A)  LDAP poisoning
B)  Kerberos injection
C)  LDAP injection
D)  DAP hijackingE) None of the above
F) C) and D)

Question 4

Discuss the two significant weaknesses of DAC.

Accepted Answer

DAC has two significant weaknesses.First...

Question 5

Although designed to support remote dial-in access to a corporate network,what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Accepted Answer

A)  RADIUS
B)  ICMP
C)  FTP
D)  TelnetE) All of the above
F) B) and D)

Question 6

What type of computer can forward RADIUS messages between RADIUS clients and RADIUS servers?

Accepted Answer

A)  intermediate proxy
B)  remote proxy
C)  RADIUS proxy
D)  translation proxyE) A) and D)
F) A) and C)

Question 7

Authentication,authorization,and accounting are sometimes called AAA.

Accepted Answer

A) True 
 B)False

Question 8

What is the purpose of an ACL?

Accepted Answer

ACLs provide file system security for pr...

Question 9

Discuss the differences between DAP and LDAP.

Accepted Answer

Unlike X.500 DAP,LDAP was designed to ru...

Question 10

A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as which of the following?

Accepted Answer

A)  separation of duties
B)  process sharing
C)  mandatory splitting
D)  role reversalE) A) and D)
F) B) and D)

Question 11

When LDAP traffic is made secure by using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ,what is this process called?

Accepted Answer

A)  SAML
B)  LDAPS
C)  TACACS
D)  SDMLE) None of the above
F) C) and D) B

Question 12

List three major access control models.

Accepted Answer

There are five major access control models: Mandatory Access Control (MAC),Discretionary Access Control (DAC),Role Based Access Control (RBAC),Rule Based Access Control (RBAC),and Attribute-Based Access Control (ABAC).

Question 13

With the Discretionary Access Control (DAC)model,no object has an owner;the system has total control over that object.

Accepted Answer

A) True 
 B)False

Question 14

Describe LDAP injection attacks.

Accepted Answer

A weakness of LDAP is that it can be subject to LDAP injection attacks.These attacks,similar to SQL injection attacks,can occur when user input is not properly filtered.This may allow an attacker to construct LDAP statements based on user input statements.The attacker could then retrieve information from the LDAP database or modify its content.The defense against LDAP injection attacks is to examine all user input before processing.

Question 15

Which access control model is considered to be the least restrictive?

Accepted Answer

A)  Role Based Access Control
B)  Mandatory Access Control
C)  Rule Based Access Control
D)  Discretionary Access ControlE) C) and D)
F) B) and C)

Question 16

Which major types of access involving system resources are controlled by ACLs? (Choose all that apply. )

Accepted Answer

A)  system access
B)  remote access
C)  user access
D)  application accessE) A) and D)
F) B) and C)

Question 17

What is the name for a predefined framework that can be used for controlling access,and is embedded into software and hardware?

Accepted Answer

A)  accounting and access model
B)  user control model
C)  access control model
D)  authorization control modelE) A) and C)
F) A) and B)

Question 18

What policy is designed to ensure that all confidential or sensitive materials,either in paper form or electronic,are removed from a user's workspace and secured when the items not in use or when employees leave their workspace?

Accepted Answer

A)  clean workspace
B)  secure workspace
C)  clean desk
D)  secure deskE) A) and B)
F) A) and C)

Question 19

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n) :

Accepted Answer

A)  ACE
B)  DAC
C)  entity
D)  ACLE) B) and D)
F) A) and D)

Question 20

The action that is taken by a subject over an object is called a(n) :

Accepted Answer

A)  authorization
B)  access
C)  control
D)  operationE) None of the above
F) A) and D)

Exam 12: Access Management

Which access control model that uses access based on a user's job function within an organization?

Correct Answer
verified

A Local Group Policy (LGP)has more options than a Group Policy.

Correct Answer
verified

What kind of attack allows for the construction of LDAP statements based on user input statements,which can then be used to access the LDAP database or modify the database's information?

Correct Answer
verified

Discuss the two significant weaknesses of DAC.

Correct Answer
verified
DAC has two significant weaknesses.First...
View Answer

Although designed to support remote dial-in access to a corporate network,what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Correct Answer
verified

What type of computer can forward RADIUS messages between RADIUS clients and RADIUS servers?

Correct Answer
verified

Authentication,authorization,and accounting are sometimes called AAA.

Correct Answer
verified

What is the purpose of an ACL?

Correct Answer
verified
ACLs provide file system security for pr...
View Answer

Discuss the differences between DAP and LDAP.

Correct Answer
verified
Unlike X.500 DAP,LDAP was designed to ru...
View Answer

A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as which of the following?

Correct Answer
verified

When LDAP traffic is made secure by using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ,what is this process called?

Correct Answer
verified
B

List three major access control models.

Correct Answer
verified
There are five major access control models: Mandatory Access Control (MAC),Discretionary Access Control (DAC),Role Based Access Control (RBAC),Rule Based Access Control (RBAC),and Attribute-Based Access Control (ABAC).

With the Discretionary Access Control (DAC)model,no object has an owner;the system has total control over that object.

Correct Answer
verified

Describe LDAP injection attacks.

Which access control model is considered to be the least restrictive?

Correct Answer
verified

Which major types of access involving system resources are controlled by ACLs? (Choose all that apply. )

Correct Answer
verified

What is the name for a predefined framework that can be used for controlling access,and is embedded into software and hardware?

Correct Answer
verified

What policy is designed to ensure that all confidential or sensitive materials,either in paper form or electronic,are removed from a user's workspace and secured when the items not in use or when employees leave their workspace?

Correct Answer
verified

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n) :

Correct Answer
verified

The action that is taken by a subject over an object is called a(n) :

Correct Answer
verified

Exam 12: Access Management

Which access control model that uses access based on a user's job function within an organization?

Correct AnswerverifiedShow Answer

A Local Group Policy (LGP)has more options than a Group Policy.

Correct AnswerverifiedShow Answer

What kind of attack allows for the construction of LDAP statements based on user input statements,which can then be used to access the LDAP database or modify the database's information?

Correct AnswerverifiedShow Answer

Discuss the two significant weaknesses of DAC.

Correct AnswerverifiedDAC has two significant weaknesses.First...View AnswerShow Answer

Although designed to support remote dial-in access to a corporate network,what service below is commonly used with 802.1x port security for both wired and wireless LANs?

Correct AnswerverifiedShow Answer

What type of computer can forward RADIUS messages between RADIUS clients and RADIUS servers?

Correct AnswerverifiedShow Answer

Authentication,authorization,and accounting are sometimes called AAA.

Correct AnswerverifiedShow Answer

What is the purpose of an ACL?

Correct AnswerverifiedACLs provide file system security for pr...View AnswerShow Answer

Discuss the differences between DAP and LDAP.

Correct AnswerverifiedUnlike X.500 DAP,LDAP was designed to ru...View AnswerShow Answer

A vulnerable process that is divided between two or more individuals to prevent fraudulent application of the process is known as which of the following?

Correct AnswerverifiedShow Answer

When LDAP traffic is made secure by using Secure Sockets Layer (SSL) or Transport Layer Security (TLS) ,what is this process called?

Correct AnswerverifiedB

List three major access control models.

Correct AnswerverifiedThere are five major access control models: Mandatory Access Control (MAC),Discretionary Access Control (DAC),Role Based Access Control (RBAC),Rule Based Access Control (RBAC),and Attribute-Based Access Control (ABAC).

With the Discretionary Access Control (DAC)model,no object has an owner;the system has total control over that object.

Correct AnswerverifiedShow Answer

Describe LDAP injection attacks.

Which access control model is considered to be the least restrictive?

Correct AnswerverifiedShow Answer

Which major types of access involving system resources are controlled by ACLs? (Choose all that apply. )

Correct AnswerverifiedShow Answer

What is the name for a predefined framework that can be used for controlling access,and is embedded into software and hardware?

Correct AnswerverifiedShow Answer

What policy is designed to ensure that all confidential or sensitive materials,either in paper form or electronic,are removed from a user's workspace and secured when the items not in use or when employees leave their workspace?

Correct AnswerverifiedShow Answer

A list that specifies which subjects are allowed to access an object and what operations they can perform on it is referred to as a(n) :

Correct AnswerverifiedShow Answer

The action that is taken by a subject over an object is called a(n) :

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
DAC has two significant weaknesses.First...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
ACLs provide file system security for pr...
View Answer

Correct Answer
verified
Unlike X.500 DAP,LDAP was designed to ru...
View Answer

Correct Answer
verified

Correct Answer
verified
B

Correct Answer
verified
There are five major access control models: Mandatory Access Control (MAC),Discretionary Access Control (DAC),Role Based Access Control (RBAC),Rule Based Access Control (RBAC),and Attribute-Based Access Control (ABAC).

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified