Master Computer Security: Protection Mechanisms and Access Control

Question 1

Which concept involves granting users only the permissions necessary to perform their job duties?

Accepted Answer

Principle of least privilege

Answer

Principle of maximum privilege

Answer

Principle of seniority-based permissions

Answer

Principle of user-defined permissions

Question 2

Which of the following is a potential disadvantage of implementing multi-factor authentication?

Accepted Answer

Inconvenience for legitimate users

Answer

Enhanced security

Answer

Increased user convenience

Answer

Reduced risk of cyberattacks

Question 3

In the context of authentication mechanisms, which of these options does NOT directly serve the purpose of verifying a user's identity?

Accepted Answer

Data encryption

Answer

Passcode

Answer

Retinal scan

Answer

Two-factor authentication

Question 4

What is a key advantage of multi-factor authentication compared to traditional password-based authentication?

Accepted Answer

Enhanced security, making it harder for attackers to access accounts

Answer

Reduced costs, eliminating the need for expensive hardware or biometrics

Answer

Increased convenience, requiring only one form of authentication

Answer

Improved user experience, allowing users to select their preferred authentication methods

Question 5

Which security mechanism is primarily used to verify a user's identity and prevent unauthorized access to resources?

Accepted Answer

Authentication

Answer

Authorization

Answer

Encryption

Answer

Vulnerability Assessment

Question 6

Which security policy ensures that only authorized users can access specific data, enforcing data confidentiality?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Discretionary Access Control (DAC)

Answer

Role-Based Access Control (RBAC)

Answer

Attribute-Based Access Control (ABAC)

Question 7

Which authentication method uses distinctive physical or behavioral traits of an individual?

Accepted Answer

Biometric authentication

Answer

Password-based authentication

Answer

Multi-factor authentication

Answer

Token-based authentication

Question 8

To enhance password security, an organization mandates strong passwords for employee accounts. Which password policy aligns with recommended best practices for password strength?

Accepted Answer

Passwords must comprise at least 8 characters, including an uppercase letter, a lowercase letter, a number, and a special character.

Answer

Passwords must have a minimum of 10 characters, without any restrictions on character types or special characters.

Answer

Passwords must not exceed 12 characters and can only contain lowercase letters.

Answer

Passwords must match the employee's user ID, regardless of length or complexity.

Question 9

Which access control model assigns permissions based on a user's role and the resource being accessed?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 10

Which authentication method verifies users through their distinctive physical or behavioral characteristics?

Accepted Answer

Biometric authentication

Answer

Password-based authentication

Answer

Multi-factor authentication

Answer

Authorization and access control

Question 11

Which multi-factor authentication method verifies users through their distinctive physical traits?

Accepted Answer

Fingerprint scan

Answer

Password

Answer

Security token

Answer

One-time password

Question 12

Which authentication method relies on unique biological characteristics?

Accepted Answer

Fingerprint scanning

Answer

Password-based

Answer

Multi-factor authentication

Answer

Token-based

Question 13

Identify the type of malware that commonly infiltrates systems through social engineering techniques, specifically via deceptive emails with malicious attachments or links.

Accepted Answer

Phishing

Answer

Virus

Answer

Trojan

Answer

Ransomware

Question 14

Which of the following is a potential disadvantage of using biometrics-based authentication systems?

Accepted Answer

Susceptibility to spoofing attacks by impersonating the user's biometric traits

Answer

Enhanced security against unauthorized access

Answer

Increased convenience for users without requiring additional tokens

Answer

Elimination of password-related risks and vulnerabilities

Question 15

Which access control model grants users access to protected resources based on their job titles or group memberships?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Question 16

Which authentication method enhances security by using multiple factors, unlike single-factor authentication?

Accepted Answer

Password and hardware token

Answer

Username and password only

Answer

Knowledge-based authentication

Answer

Single sign-on (SSO)

Question 17

Which two-factor authentication method combines a password with a physical device?

Accepted Answer

Smart cards

Answer

Single Sign-On (SSO)

Answer

Kerberos

Answer

Biometrics

Question 18

In multi-factor authentication (MFA), what is considered 'something you know'?

Accepted Answer

Password or PIN

Answer

Physical token or smart card

Answer

Retina scan

Question 19

In the realm of operating systems, which of the following is NOT a type of access control mechanism?

Accepted Answer

Transmission Control Protocol (TCP)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Role-Based Access Control (RBAC)

Question 20

In the Role-Based Access Control (RBAC) model, what factor directly determines a user's access permissions?

Accepted Answer

User's assigned role within the organization

Answer

Resource ownership by the user

Answer

Security labels attached to the resource

Question 21

In network intrusion detection, which technique identifies attacks by detecting deviations from typical network activity patterns?

Accepted Answer

Anomaly-based detection

Answer

Signature-based detection

Answer

Heuristic-based detection

Answer

Protocol-based detection

Question 22

In the realm of operating systems, what is a primary advantage of employing multi-factor authentication over single-factor authentication?

Accepted Answer

Increased protection against unauthorized access

Answer

Enhanced user convenience

Answer

Reduced costs associated with implementing security measures

Question 23

Which of these actions **weakens** system security?

Accepted Answer

Granting excessive privileges to users

Answer

Regularly patching and updating the system

Answer

Using strong passwords and multi-factor authentication

Answer

Monitoring system logs for suspicious activity

Question 24

Which of the following authentication technologies is a recent development, distinct from traditional methods like passwords, biometrics, and multi-factor authentication?

Accepted Answer

Blockchain-based authentication

Answer

QR code scanning

Answer

Smart card authentication

Answer

Voice recognition

Question 25

Which two-factor authentication method involves sending a temporary password to a user's mobile device?

Accepted Answer

SMS-based OTP

Answer

Hardware token

Answer

Biometric scan

Question 26

Which security policy ensures that data remains unaltered and trustworthy, preserving its integrity?

Accepted Answer

Integrity Policy

Answer

Confidentiality Policy

Answer

Non-repudiation Policy

Answer

Availability Policy

Question 27

Which authentication method confirms a user's identity by analyzing unique physical characteristics?

Accepted Answer

Biometric authentication

Answer

Password-based authentication

Answer

Token-based authentication

Question 28

Which of the following Techniques is **NOT** commonly used for malware propagation?

Accepted Answer

Using strong antivirus software

Answer

Phishing

Answer

Drive-by downloads

Answer

Spam emails

Question 29

Ransomware is a type of malware that encrypts a victim's files and demands payment for their decryption. Which of the following is a key characteristic of ransomware?

Accepted Answer

Provides instructions for decrypting the files once payment is made

Answer

Spreads through email attachments

Answer

Targets specific files on the victim's computer

Answer

Is undetectable by antivirus software

Question 30

Which security measure restricts access to sensitive data and systems, granting it only to authorized individuals and devices?

Accepted Answer

Implementing role-based access control (RBAC) to assign permissions based on job roles

Answer

Enforcing robust password policies

Answer

Deploying firewalls to screen incoming network traffic

Answer

Enabling automatic software updates to address security vulnerabilities

Question 31

Which encryption algorithms are symmetric block ciphers that use a secret key to encrypt data in fixed-size blocks?

Accepted Answer

DES (Data Encryption Standard)

Accepted Answer

AES (Advanced Encryption Standard)

Answer

RSA (Rivest-Shamir-Adleman)

Answer

SHA-256 (Secure Hash Algorithm 256)

Question 32

In authorization and access control, which model enables administrators to assign permissions to users based on their roles?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 33

In which access control model are access rights determined by the roles and responsibilities of users within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Question 34

Which vulnerability assessment technique involves simulating an attack on a system to uncover potential weaknesses?

Accepted Answer

Penetration testing

Answer

Risk assessment

Answer

Vulnerability scanning

Answer

Patch management

Question 35

In network security, which technique detects intrusions by analyzing network traffic patterns for unusual behavior that could signal a cyberattack?

Accepted Answer

Anomaly-based detection

Answer

Signature-based detection

Answer

Stateful protocol analysis

Question 36

Question:

Remote access to enterprise networks poses security risks. Which security measures are most effective in mitigating these risks?

Accepted Answer

Option 1:

Implement a VPN with strong encryption and require two-factor authentication for remote access.

Answer

Option 2:

Allow remote access without additional security measures, informing users of the risks.

Answer

Option 3:

Configure firewalls to allow remote access from any IP address if the user is using a company device.

Question 37

How do vulnerability assessment and management (VAM) tools help organizations identify and prioritize vulnerabilities?

Accepted Answer

VAM tools help organizations prioritize vulnerabilities based on their severity and risk, enabling informed decisions about patching.

Answer

VAM tools are essential for all organizations, regardless of size, as they can identify and prioritize all types of vulnerabilities.

Answer

VAM tools are only effective for large organizations with complex IT infrastructures.

Answer

VAM tools can only identify vulnerabilities in software, not in hardware or network devices.

Question 38

Discretionary Access Control (DAC) is a type of access control model. What is its primary function?

Accepted Answer

Restricting access based on the identity of the user

Answer

Restricting access based on the sensitivity of the data

Answer

Restricting access based on the user's role within the organization

Answer

Restricting access based on attributes such as location or device type

Question 39

Which type of encryption algorithm employs a single key for both encryption and decryption processes?

Accepted Answer

Symmetric-key encryption

Answer

Asymmetric-key encryption

Answer

Hashing function

Answer

Digital signature

Question 40

Identify the option that is NOT considered a type of access control list (ACL):

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control List (DACL)

Answer

Mandatory Access Control List (MACL)

Answer

Attribute-Based Access Control (ABAC)

Question 41

What is the primary objective of a firewall?

Accepted Answer

Preventing unauthorized network access

Answer

Encrypting data transmitted across a network

Answer

Detecting and blocking malicious software

Answer

Providing backup and resilience

Question 42

Explain the key distinction between symmetric and asymmetric encryption.

Accepted Answer

Symmetric encryption utilizes the same key for encryption and decryption, while asymmetric encryption employs distinct keys.

Answer

Asymmetric encryption is inherently more secure than symmetric encryption.

Answer

Symmetric encryption outperforms asymmetric encryption in terms of speed.

Answer

None of the options provided are accurate.

Question 43

When creating secure passwords, which of the following best practices should be followed?

Accepted Answer

Incorporate a mix of upper and lower case letters, numbers, and symbols.

Answer

Keep the password as concise as possible.

Answer

Use commonly used words or phrases.

Answer

Share your password with others.

Question 44

Why is it crucial to maintain up-to-date security patches?

Accepted Answer

To address vulnerabilities and protect against identified threats

Answer

To boost system performance

Answer

To adhere to industry regulations

Answer

To demonstrate commitment to cybersecurity

Question 45

Which of the following is NOT a fundamental principle of computer security?

Accepted Answer

Optimality

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 46

What type of access control mechanism grants permissions based on the user's assigned roles?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 47

What is the primary function of a firewall in network security?

Accepted Answer

Block unauthorized network access

Answer

Detect and mitigate malicious traffic

Answer

Monitor and report security breaches

Answer

Perform network address translation

Question 48

Which of the following practices is considered a best practice for secure password management?

Accepted Answer

Implementing two-factor authentication

Answer

Reusing passwords for multiple accounts

Answer

Creating simple, easily guessable passwords

Answer

Storing passwords in plain text files

Question 49

What is the key difference between a vulnerability and an exploit?

Accepted Answer

A vulnerability exists in software, while an exploit targets that vulnerability.

Answer

A vulnerability is a threat, while an exploit is a protective measure.

Answer

A vulnerability is a malware, while an exploit is a form of attack.

Answer

There is no significant difference between a vulnerability and an exploit.

Question 50

What is the main objective of conducting a security audit?

Accepted Answer

Identify vulnerabilities, assess risks, and recommend improvements

Answer

Enforce established security policies

Answer

Monitor ongoing system activities for potential breaches

Answer

Provide training for security personnel

Question 51

Which access control model assigns permissions based on users' identities, roles, and the resources they are trying to access?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 52

Which type of malware encrypts files on a user's device and demands payment to decrypt them?

Accepted Answer

Ransomware

Answer

Virus

Answer

Trojan horse

Answer

Spyware

Question 53

Which cryptographic algorithm is widely used for encrypting internet communications to ensure data privacy and integrity?

Accepted Answer

AES (Advanced Encryption Standard)

Answer

RSA (Rivest-Shamir-Adleman)

Answer

SHA-256 (Secure Hash Algorithm 256)

Answer

DES (Data Encryption Standard)

Question 54

What is the primary purpose of a firewall as a network security device?

Accepted Answer

To restrict unauthorized access to a network by controlling incoming and outgoing traffic

Answer

To scan and detect viruses and malware within network traffic

Answer

To monitor and analyze network activity for potential threats

Answer

To encrypt data passing through the network

Question 55

Which security assessment method involves actively attempting to exploit vulnerabilities in a system to evaluate its security posture?

Accepted Answer

Penetration testing

Answer

Vulnerability scanning

Answer

Risk assessment

Answer

Security audit

Question 56

Which of the following poses a significant security risk to operating systems due to its ability to exploit memory vulnerabilities and execute unauthorized code?

Accepted Answer

Buffer overflow attack

Answer

Cross-site scripting (XSS)

Answer

SQL injection

Answer

Man-in-the-middle attack

Question 57

What is the core concept behind the principle of least privilege in computer security?

Accepted Answer

Users should be granted only the minimum permissions necessary to perform their essential tasks

Answer

Administrators should have unrestricted access to all system resources

Answer

Users should be given as many permissions as possible to increase productivity

Answer

Permissions should be assigned based on job titles and seniority

Question 58

Which of the following security mechanisms is used to protect data by converting it into an unreadable format?

Accepted Answer

Encryption

Answer

Authentication

Answer

Authorization

Answer

Access control

Question 59

To improve the effectiveness of security awareness training programs, which approach should organizations prioritize?

Accepted Answer

Customizing training content to align with specific employee roles and responsibilities

Answer

Applying a uniform training approach for all employees

Answer

Focusing solely on technical training, neglecting human factors

Answer

Conducting training sessions infrequently, such as once a year

Question 60

For IoT devices, which approach offers the most comprehensive protection against potential vulnerabilities and data breaches?

Accepted Answer

Combining hardware-based security features (secure boot, tamper-resistant hardware) with software-based measures (encryption, intrusion detection)

Answer

Implementing basic access controls like passwords and firewalls

Answer

Relying solely on software updates and patches to address vulnerabilities

Answer

Disabling non-essential features and services on IoT devices to minimize attack surface

Question 61

When selecting the optimal location for an intrusion detection sensor, which factor is most crucial?

Accepted Answer

Threat likelihood

Answer

Network traffic volume

Answer

System performance

Answer

Implementation cost

Question 62

How does artificial intelligence (AI) contribute to cybersecurity by detecting and preventing threats? Discuss its benefits, drawbacks, and possible effects on security professionals.

Accepted Answer

AI automates threat detection and response, enhancing efficiency and accuracy.

Answer

AI makes security professionals obsolete because it can handle all tasks more effectively.

Answer

AI is not dependable enough for crucial security applications.

Answer

AI is easily bypassed by attackers, making it ineffective for threat prevention.

Question 63

Which security mechanism ensures that only authorized individuals can access specific resources and services?

Accepted Answer

Authorization

Answer

Encryption

Answer

Authentication

Answer

Firewalls

Question 64

Which security principle dictates that users should be granted only the minimum permissions necessary to execute their responsibilities?

Accepted Answer

Least privilege

Answer

Separation of duties

Answer

Need-to-know

Answer

Least common mechanism