Access Control (AC) Quiz Part 2

Question 1

A privileged command is a human-initiated command executed on a system involving security functions.

Accepted Answer

True

Question 2

Separation of duties is unneeded as it's easier for one person to both test security mechanisms and do security audits.

Accepted Answer

False

Question 3

Unidentified and unauthorized wireless access points must be prevented, even created by an authorized network user.

Accepted Answer

True

Question 4

Which of the following attributes would an organization NOT consider before granting remote access to a user?

Accepted Answer

Nothing needs to be checked for tolerance levels before granting access

Question 5

The enforcement of separation between systems in different security domains can include all of the following EXCEPT ...

Accepted Answer

the unrestricted flow of information flow between securitydomains

Question 6

A periodic review of who requires access to CUI, removing unneeded access, is not needed.

Accepted Answer

False

Question 7

Will a laptop typically use full disk encryption (FDE) or container-based encryption?

Accepted Answer

Full disk encryption

Question 8

Which of the following is NOT a method that should be used to authenticate users to a Wireless Access Point?

Accepted Answer

Open authentication, as it authenticates any user.

Question 9

Information flow control regulates where information can travel within a system and between systems.

Accepted Answer

True

Question 10

Remote access is access to organizational systems by users communicating through external networks (e.g., the Internet).

Accepted Answer

True

Question 11

Which of the following is NOT a benefit of routing remote access via managed access control points?

Accepted Answer

Network management is decentralized by monitoring a device per location.

Questions 11