M4 - Implement Identity and Access Management

Which of these is an example of a “something you know” factor?

Password

What is the primary goal of the principle of least privilege?

To grant users only the access they need to perform their job

What is the primary purpose of a Certificate Authority (CA) in PKI?

Verify the identity of entities

In multi-factor authentication, what type of factor is a security question?

Something you know

What is the primary purpose of account deprovisioning?

Remove access when a user no longer needs it

What type of control is biometric access?

Physical control

Which access control model assigns permissions based on user roles?

Role-Based Access Control (RBAC)

What is the purpose of multi-factor authentication (MFA)?

To increase security by using multiple authentication methods

What does the term “authorization” refer to?

Granting permissions to a user after authentication

What type of access control method is a CAPTCHA test?

Preventative control

Which factor would a fingerprint scan fall under in multi-factor authentication (MFA)?

Something you are

What is the main function of a Public Key Infrastructure (PKI)?

Supports identity verification and secure communication

What is the purpose of a smart card in authentication?

It provides a physical factor for authentication

What is an example of aa single-factor authentication method?

Password only

Which access control model is commonly used in government and military settings?

Mandatory Access Control (MAC)

What does an authentication method based on “something you have” include?

Token

Which of the following best describes access control?

A mechanism to grant or restrict access to resources

Which type of access control model grants access based on rules defined by a system administrator?

Mandatory Access Control (MAC)

What is the purpose of single sign-on (SSO)?

To allow users to authenticate once to access multiple applications

Which access control model uses attributes (such as location or time) to determine access?

Attribute-Based Access Control (ABAC)