Practice 2.3.4
Need to know access is required to access which types of resources?
Compartmentalized resources
Which of the following is an example of privilege escalation?
Creeping privileges
You want to implement an access control list where only the users you specifically authorize have access to the resource. Anyone not on the list should be prevented from having access. Which of the following methods of access control will the access list use?
Explicit allow, implicit deny
An access control list ACL contains a list of users and allowed permissions. What is it called if the ACL automatically prevents access to anyone who is not on the list?
Implicit deny
You are concerned that the accountant in your organization might have the chance to modify financial information and steal from the company. You want to periodically have another person take over all accounting responsibilities to catch any irregularities. Which security principle are you implementing by periodically shifting accounting responsibilities?
Job rotation
Which of the following principles is implemented in a mandatory access control model to determine object access by classification level?
Need to know
Separation of duties is an example of which type of access control?
Preventative
What is the primary purpose of separation of duties?
Prevents conflicts of interest
You assign access permissions so that users can only access the resources required to accomplish their specific work tasks. Which security principle are you complying with?
Principle of least privilege
Which type of media preparation is sufficient for media that will be reused in a different security contexts with your organization?
Sanitation
Which security principle prevents any one administrator from having sufficient access to compromise the security of the overall IT solution?
Separation of duties
You want to make sure that any reimbursement checks by your company cannot be issued by a single person. Which security principle should you implement to accomplish this goal?
Separation of duties
