ISC2 CC Domain 3

In a company, what is the purpose of periodic access reviews?

Ronke was granted access to Finance files necessary for her job duties. This is an example of _______ .

Which mechanism lets a user log in once to access multiple apps without re-entering credentials?

Which of the following best defines access control?

Which access control model allows the owner of the resource to decide who gets access?

Which of the following best describes least privilege?

Which of the following is NOT a common factor in authentication?

What is the purpose of an access control list (ACL)?

In which attack does an attacker use stolen usernames and passwords from one service to try logging into another?

Which of these is an example of multi-factor authentication (MFA)?

Which of the following is an example of "something you have" in authentication?

Which of the following is NOT a logical access control?

Which of the following provides both confidentiality and authentication for access control?

Which type of attack floods a system or network with traffic to make it unavailable to users?

Which of the following best protects data from being read during transmission over a network?

Which type of access control system checks user attributes like department or clearance level?

Which of the following is primarily intended to prevent fraud?

Which mechanism allows users in one organization to access services in another organization using existing credentials?

In the context of access control, which model uses labels and classifications like "Confidential" or "Top Secret"?

Which of the following best demonstrates physical access control?