Data Access Controls and Permissions Quiz

1. True or False: Multi-factor authentication (MFA) is unnecessary if a strong password policy exists.

True

False

2. True or False: Data access logs should be retained according to regulatory requirements.

True

False

3. What is a 'data governance framework'?

A structured approach to managing data policies, processes, and controls

A type of database software

A backup and recovery strategy

A data visualization tool

4. Which access control mechanism is most appropriate for confidential government documents?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Role-Based Access Control (RBAC)

No access control needed

5. True or False: Temporary access permissions should be automatically revoked after expiration.

True

False

6. What is the primary function of an identity and access management (IAM) system?

To centrally manage user identities and their permissions

To delete inactive user accounts

To monitor network traffic

To encrypt email communications

7. In data governance, 'segregation of duties' primarily prevents what risk?

Fraud and unauthorized data modification

Network latency

Disk space depletion

User session timeouts

8. True or False: Role-based access control requires regular review and recertification.

True

False

9. Which of the following is a key component of access control policies?

User authentication and authorization

Database size limits

Network speed settings

Backup frequency

10. What does 'data masking' accomplish in data governance?

Hides sensitive data from unauthorized users

Deletes data permanently

Compresses data for storage

Encrypts all database columns

11. What does RBAC stand for in data governance?

Role-Based Access Control

Resource-Based Authorization Code

Regulatory Baseline Access Compliance

Real-time Business Activity Capture

12. In audit trails, what is typically recorded for data access?

User ID, timestamp, and data accessed

Only successful logins

Database size only

System uptime metrics

13. What is 'privileged access management' (PAM) designed to protect?

Administrative and high-level user accounts

Public data

User passwords only

Network bandwidth

14. Which regulation most directly impacts data access controls in healthcare?

GDPR

HIPAA

SOC 2

ISO 27001

15. True or False: Access control lists (ACLs) can be applied at both file and directory levels.

True

False

16. What is the primary purpose of data classification in governance?

To organize data alphabetically

To determine appropriate access levels and security measures

To improve database performance

To reduce storage costs

17. Which access control model is most flexible for complex organizational structures?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

18. In data governance, what is a 'data steward'?

A person responsible for data quality and metadata management

A system that encrypts sensitive data

A compliance officer who audits data breaches

A tool that backs up databases

19. ABAC differs from RBAC primarily by basing decisions on what factor?

User roles only

Resource attributes and user attributes

Department hierarchy

Time of access

20. Which principle ensures users have only the minimum permissions needed to perform their job?

Principle of Necessity

Least Privilege Principle

Minimum Access Rule

Baseline Permission Standard

Data+ Data Access Controls and Permissions Quiz

1. True or False: Multi-factor authentication (MFA) is unnecessary if a strong password policy exists.

2.

What first name or nickname would you like us to use?

2. True or False: Data access logs should be retained according to regulatory requirements.

3. What is a 'data governance framework'?

4. Which access control mechanism is most appropriate for confidential government documents?

5. True or False: Temporary access permissions should be automatically revoked after expiration.

6. What is the primary function of an identity and access management (IAM) system?

7. In data governance, 'segregation of duties' primarily prevents what risk?

8. True or False: Role-based access control requires regular review and recertification.

9. Which of the following is a key component of access control policies?

10. What does 'data masking' accomplish in data governance?

11. What does RBAC stand for in data governance?

12. In audit trails, what is typically recorded for data access?

13. What is 'privileged access management' (PAM) designed to protect?

14. Which regulation most directly impacts data access controls in healthcare?

15. True or False: Access control lists (ACLs) can be applied at both file and directory levels.

16. What is the primary purpose of data classification in governance?

17. Which access control model is most flexible for complex organizational structures?

18. In data governance, what is a 'data steward'?

19. ABAC differs from RBAC primarily by basing decisions on what factor?

20. Which principle ensures users have only the minimum permissions needed to perform their job?