SSCP Access Controls Quiz

1. Which authentication factor involves something you know?

Password or PIN

Fingerprint

Security token

Physical ID card

2. What does LDAP (Lightweight Directory Access Protocol) primarily provide in access control systems?

Centralized directory services for user authentication and identity information

Encryption of network communications

Firewall management

Data backup services

3. Which mechanism prevents unauthorized access by requiring proof of user identity before granting system entry?

Access control

Encryption

Firewall

Intrusion detection

4. What is the 'need to know' principle in access control?

Users access only information required for their job duties

All users have access to all information

Users can access information based on seniority

Information access is unrestricted

5. Which identity management practice involves verifying user identity before granting access?

Authentication

Authorization

Accounting

Auditing

6. What is a privilege escalation vulnerability?

An exploit allowing users to gain higher access levels than authorized

A legitimate increase in user permissions

A scheduled access level review

An encryption protocol

7. Which process ensures users no longer have access when leaving an organization?

Account deprovisioning

Access provisioning

Permission escalation

Session management

8. What is the primary purpose of account provisioning in access control?

Creating and configuring user accounts with appropriate permissions

Deleting inactive user accounts

Monitoring user activity logs

Encrypting user data

9. Which authentication method uses a hardware or software device to generate time-based codes?

One-Time Password (OTP) token

Security question

Username verification

Email confirmation

10. What does single sign-on (SSO) enable users to do?

Access multiple systems with one set of credentials

Use biometric authentication only

Bypass security policies

Encrypt all communications

11. Which access control model uses roles to determine user permissions?

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

12. What is the purpose of access control lists (ACLs)?

To specify which users or groups have access to resources

To encrypt sensitive data

To monitor network traffic

To authenticate users

13. Which access control model uses attributes to make access decisions?

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

14. In Discretionary Access Control (DAC), who has authority to change permissions?

The resource owner

The system administrator only

The security officer

All users equally

15. What is a session token used for in access control?

To maintain user authentication state during a session

To encrypt network traffic

To backup user credentials

To audit file access

16. Which protocol is commonly used for centralized authentication in enterprise networks?

Kerberos

HTTP

SSH

FTP

17. What does the principle of least privilege require?

Users receive only the minimum permissions needed for their role

All users have equal access to resources

Administrators have full system access

Permissions are granted based on seniority

18. In Mandatory Access Control (MAC), who determines access permissions?

The system administrator or security policy

The resource owner

The individual user

A third-party auditor

19. Which of the following is an example of multifactor authentication?

Password and security question

Username and password

Password and biometric scan

Email and username

20. What is the primary difference between authentication and authorization?

Authentication verifies identity; authorization determines permissions

Authorization verifies identity; authentication determines permissions

Both verify and determine permissions identically

Authentication applies only to external users