Examen:

CISSP - (ISC)2 Certified Information Systems Security Professional - Chapter 14

1.-Which of the following best describes an implicit deny principle?
A. All actions that are not expressly denied are allowed.
B. All actions that are not expressly allowed are denied.
C. All actions must be expressly denied.
D. None of the above.

A table includes multiple objects and subjects, and it identifies the specific access each subject has to different objects.

2.-What is this table?
A. Access control list
B. Access control matrix
C. Federation
D. Creeping privilege

You are reviewing access control models and want to implement a model that allows the owner of an object to grant privileges to other users.

3.-Which of the following meets this requirement?
A. Mandatory Access Control (MAC) model
B. Discretionary Access Control (DAC) model
C. Role- Based Access Control (RBAC) model
D. Rule- based access control model

4.-Which of the following access control models allows the owner of data to modify permissions?
A. Discretionary Access Control (DAC)
B. Mandatory Access Control (MAC)
C. Rule- based access control
D. Risk- based access control

A central authority determines which files a user can access based on the organization’s hierarchy.

5.-Which of the following best describes this?
A. DAC model
B. An access control list (ACL)
C. Rule- based access control model
D. RBAC model

6.-Which of the following statements is true related to the RBAC model?
A. A RBAC model allows users membership in multiple groups.
B. A RBAC model allows users membership in a single group.
C. A RBAC model is nonhierarchical.
D. A RBAC model uses labels.

You are reviewing different access control models.

7.-Which of the following best describes a rule- based access control model?
A. It uses local rules applied to users individually.
B. It uses global rules applied to users individually.
C. It uses local rules applied to all users equally.
D. It uses global rules applied to all users equally.

Your organization is considering deploying a software- defined network (SDN) in the data center.

8.-Which of the following access control models is commonly used in a SDN?
A. Mandatory Access Control (MAC) model
B. Attribute- Based Access Control (ABAC) model
C. Role- Based Access Control (RBAC) model
D. Discretionary Access Control (DAC) model

The MAC model supports different environment types.

9.-Which of the following grants users access using predefined labels for specific labels?
A. Compartmentalized environment
B. Hierarchical environment
C. Centralized environment
D. Hybrid environment

10.-Which of the following access control models identifies the upper and lower bounds of access for subjects with labels?
A. Nondiscretionary access control
B. Mandatory Access Control (MAC)
C. Discretionary Access Control (DAC)
D. Attribute- Based Access Control (ABAC)

11.-Which of the following access control models uses labels and is commonly referred to as a lattice-based model?
A. DAC
B. Nondiscretionary
C. MAC
D. RBAC

Management wants users to use multifactor authentication any time they access cloud- based resources.

12.-Which of the following access control models can meet this requirement?
A. Risk- based access control
B. Mandatory Access Control (MAC)
C. Role- Based Access Control (RBAC)
D. Discretionary Access Control (DAC)

13.-Which of the following access control models determines access based on the environment and the situation?
A. Risk- based access control
B. Mandatory Access Control (MAC)
C. Role- Based Access Control (RBAC)
D. Attribute- Based Access Control (ABAC)

A cloud- based provider has implemented an SSO technology using JSON Web Tokens. The tokens provide authentication information and include user profiles.

14.-Which of the following best identifies this technology?
A. OIDC
B. OAuth
C. SAML
D. OpenID

Some users in your network are having problems authenticating with a Kerberos server. While troubleshooting the problem, you verified you can log on to your regular work computer. However, you are unable to log on to the user’s computer with your credentials.

15.-Which of the following is most likely to solve this problem?
A. Advanced Encryption Standard (AES)
B. Network Access Control (NAC)
C. Security Assertion Markup Language (SAML)
D. Network Time Protocol (NTP)

Your organization has a large network supporting thousands of employees, and it utilizes Kerberos.

16.-Of the following choices, what is the primary purpose of Kerberos?
A. Confidentiality
B. Integrity
C. Authentication
D. Accountability

17.-What is the function of the network access server within a RADIUS architecture?
A. Authentication server
B. Client
C. AAA server
D. Firewall

Larry manages a Linux server. Occasionally, he needs to run commands that require root-level privileges. Management wants to ensure that an attacker cannot run these commands if the attacker compromises Larry’s account.

18.-Which of the following is the best choice?
A. Grant Larry sudo access.
B. Give Larry the root password.
C. Add Larry’s account to the administrator’s group.
D. Add Larry’s account to the LocalSystem account.

An attacker used a tool to exploit a weakness in NTLM. They identified an administrator’s user account. Although the attacker didn’t discover the administrator’s password, they did access remote systems by impersonating the administrator.

19.-Which of the following best identifies this attack?
A. Pass the ticket
B. Golden ticket
C. Rainbow table
D. Pass the hash

Your organization recently suffered a major data breach. After an investigation, security analysts discovered that attackers were using golden tickets to access network resources.

20.-Which of the following did the attackers exploit?
A. RADIUS
B. SAML
C. Kerberos
D. OIDC