Data Access Permissions Quiz for Analysts

1. True or False: Access logs should be reviewed regularly to detect unauthorized activity.

True

False

2. True or False: Storing passwords in plain text in configuration files is an acceptable security practice.

True

False

3. What does the concept of 'segregation of duties' aim to prevent?

Network latency

Fraud and unauthorized modifications

Database corruption

Software bugs

4. Which encryption standard is commonly used to protect data in transit?

TLS/SSL

ASCII

JPEG

XML

5. True or False: Revoking access immediately when an employee leaves is a critical security practice.

True

False

6. What is an audit trail in data access management?

A physical path through the data center

A record of who accessed what data and when

A backup copy of all databases

A security clearance document

7. Which of the following is NOT a common type of access control?

Discretionary Access Control

Mandatory Access Control

Alphabetical Access Control

Role-Based Access Control

8. True or False: A user's access permissions should remain unchanged even after they change roles.

True

False

9. What is the primary advantage of attribute-based access control (ABAC) over RBAC?

It is simpler to implement

It provides more granular, context-aware permissions

It requires fewer administrators

It eliminates the need for authentication

10. Which technology uses cryptographic keys to verify user identity?

Firewall

Public Key Infrastructure

VPN

Load Balancer

11. What does RBAC stand for in the context of data access control?

Role-Based Access Control

Resource-Based Authorization Code

Restricted Backup Access Configuration

Real-time Business Analytics Control

12. A data analyst needs temporary access to a sensitive dataset. What's the best practice?

Grant permanent access for convenience

Use time-limited access provisioning

Share credentials with a manager

Request access to all datasets

13. Which of the following best describes data classification?

Organizing data by file size

Categorizing data by sensitivity and access requirements

Sorting data alphabetically

Compressing data for storage

14. What does MFA stand for in security contexts?

Multi-Factor Authentication

Multiple File Access

Master File Archive

Managed Firewall Application

15. True or False: Shared passwords among team members is acceptable if the account has read-only access.

True

False

16. Which compliance framework specifically addresses data privacy in the European Union?

HIPAA

GDPR

SOC 2

PCI-DSS

17. What is the primary purpose of an access control list (ACL)?

Track user login history

Define which users can access specific resources

Encrypt sensitive data

Monitor network traffic

18. Which authentication factor combines something you know with something you possess?

Single-factor authentication

Two-factor authentication

Biometric authentication

Token-based authentication

19. True or False: A data analyst should have write access to production databases by default.

True

False

20. Which principle ensures users have only the minimum access needed to perform their job?

Separation of Duties

Principle of Least Privilege

Defense in Depth

Zero Trust Architecture

Data Analyst Ensuring Data Access Permissions Are Correct Quiz

1. True or False: Access logs should be reviewed regularly to detect unauthorized activity.

2.

What first name or nickname would you like us to use?

2. True or False: Storing passwords in plain text in configuration files is an acceptable security practice.

3. What does the concept of 'segregation of duties' aim to prevent?

4. Which encryption standard is commonly used to protect data in transit?

5. True or False: Revoking access immediately when an employee leaves is a critical security practice.

6. What is an audit trail in data access management?

7. Which of the following is NOT a common type of access control?

8. True or False: A user's access permissions should remain unchanged even after they change roles.

9. What is the primary advantage of attribute-based access control (ABAC) over RBAC?

10. Which technology uses cryptographic keys to verify user identity?

11. What does RBAC stand for in the context of data access control?

12. A data analyst needs temporary access to a sensitive dataset. What's the best practice?

13. Which of the following best describes data classification?

14. What does MFA stand for in security contexts?

15. True or False: Shared passwords among team members is acceptable if the account has read-only access.

16. Which compliance framework specifically addresses data privacy in the European Union?

17. What is the primary purpose of an access control list (ACL)?

18. Which authentication factor combines something you know with something you possess?

19. True or False: A data analyst should have write access to production databases by default.

20. Which principle ensures users have only the minimum access needed to perform their job?