Privileged Access Management Best Practices

Study Flashcards Play Quiz

Questions and Answers

Which type of access control policy is enforced uniformly across all subjects and objects within the boundary of an information system?

Mandatory access control (MAC)

Which access control policy allows the owner of a resource to control access to that resource?

Discretionary access control (DAC)

Which of the following is NOT a type of logical access control?

Security guards

Which of the following is an example of a physical access control?

Locked doors/gates Signup and view all the answers

Which access control policy sets up user permissions based on roles?

Role-based access control (RBAC) Signup and view all the answers

What is the purpose of two-person integrity?

To ensure that no single user has complete control over a critical process Signup and view all the answers

Which type of access control model is considered the most restrictive, where the system owner defines and enforces the access control policy?

Mandatory Access Control (MAC) Signup and view all the answers

Which access control mechanism allows users to create, modify, and delete access control rules for the resources they own?

Discretionary Access Control (DAC) Signup and view all the answers

Which of the following is NOT an example of a physical access control?

Configuration settings or parameters stored as data Signup and view all the answers

Which access control model uses roles to manage permissions and access privileges?

Role-Based Access Control (RBAC) Signup and view all the answers

Which of the following is NOT a common activity performed during the 'offboarding' process for a terminated employee?

Creating a new baseline account for the employee Signup and view all the answers

Which of the following is NOT a benefit of Privileged Access Management (PAM)?

Confirming availability by never providing administrative access when needed Signup and view all the answers

Which of the following is an example of a physical access control?

Fences and locks Signup and view all the answers

What is the principle of least privilege?

Users and programs should have only the minimum privileges necessary to complete their tasks Signup and view all the answers

Which of the following is a form of mandatory access control (MAC)?

Bell-LaPadula model Signup and view all the answers

What is the purpose of segregation of duties (or separation of duties)?

To prevent collusion and reduce insider threats by requiring multiple individuals to complete a process Signup and view all the answers

What is a privileged account in the context of information security?

An account with approved authorizations for a privileged user Signup and view all the answers

What is the fundamental concept behind role-based access control (RBAC)?

Granting access based on user roles and associated permissions Signup and view all the answers

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Privileged Access Management Best Practices

Access to a Library of 520,000+ Quizzes & Flashcards

Questions and Answers

Which type of access control policy is enforced uniformly across all subjects and objects within the boundary of an information system?

Which access control policy allows the owner of a resource to control access to that resource?

Which of the following is NOT a type of logical access control?

Which of the following is an example of a physical access control?

Which access control policy sets up user permissions based on roles?

What is the purpose of two-person integrity?

Which type of access control model is considered the most restrictive, where the system owner defines and enforces the access control policy?

Which access control mechanism allows users to create, modify, and delete access control rules for the resources they own?

Which of the following is NOT an example of a physical access control?

Which access control model uses roles to manage permissions and access privileges?

Which of the following is NOT a common activity performed during the 'offboarding' process for a terminated employee?

Which of the following is NOT a benefit of Privileged Access Management (PAM)?

Which of the following is an example of a physical access control?

What is the principle of least privilege?

Which of the following is a form of mandatory access control (MAC)?

What is the purpose of segregation of duties (or separation of duties)?

What is a privileged account in the context of information security?

What is the fundamental concept behind role-based access control (RBAC)?

Studying That Suits You

More Quizzes Like This

Authorization and Access Control Quiz

Privileged Access Management (PAM) en cybersécurité

CyberArk PAM: Key Features

CyberArk PAM Key Features

Upgrade to continue