Free Practice Quiz Question List

3 Network Access Control Online Quiz Questions

Use this free practice quiz with 20 questions to review 3 Network Access Control, test your knowledge, and prepare for your next test or exam.

20 questions

Choose one

1 point

A user has successfully signed in. Which access-control process determines whether that user may modify a particular record?

A
Authentication
B
Authorization
C
Logging
D
Least privilege

True or false

1 point

True or false: Once a user is authenticated, the user is automatically authorized to access every resource on the network.

A
True
B
False

Written response

1 point

What access-control principle says to grant only the permissions needed for assigned tasks, and only for the necessary resources and duration?

Choose one

1 point

An organization wants to manage password-reset permissions through a narrowly defined HelpDesk role. Which access-control model best fits this approach?

A
Attach permissions directly to each network packet
B
Evaluate subject and environment attributes for every request
C
Assign permissions to roles and users to appropriate roles
D
Allow every authenticated user the same permissions

Choose all

1 point

Select all three items that a network access rule should specify to identify the basic access being controlled.

A
The requesting user, service, group, or device
B
The requester’s preferred interface color
C
The protected host, application, data, or network segment
D
The number of employees in the organization
E
The action the requester may perform

True or false

1 point

True or false: A device's presence on an internal network is, by itself, enough to authorize its access to a protected resource.

A
True
B
False

Written response

1 point

What access-control model assigns permissions to roles and then assigns users to appropriate roles?

Choose one

1 point

An employee may read and update their own profile in the employee portal, but the permissions policy grants employees no finance-database access. The employee can reach the portal over HTTPS. What should the access policy do if that employee requests a direct connection to the finance database?

A
Allow the employee to read and update assigned finance records because they can use the portal
B
Deny finance-database access unless a separate rule explicitly grants it
C
Allow database access whenever the employee is on the internal network
D
Grant administrator rights so the employee can complete portal tasks

Choose all

1 point

According to the description of attribute-based access control (ABAC), which attribute categories may a policy evaluate? Select all that apply.

A
Attributes of the subject
B
Attributes of the resource
C
The font style of the policy document
D
Attributes of the requested action
E
Attributes of the environment

Open ended

1 point

An organization wants its finance application server to use the finance database while preventing unrelated devices from connecting. Describe a least-privilege network rule for this situation, including the allowed connection and the handling of other database connections.

Choose one

1 point

A system evaluates a request against applicable rules and then causes a gateway to apply the resulting decision. Which description correctly identifies the two policy functions?

A
The policy decision point applies the decision to the request; the policy enforcement point evaluates rules
B
Both points only record access attempts and neither handles decisions
C
The policy decision point evaluates applicable information and rules; the policy enforcement point applies the decision
D
The policy enforcement point assigns users to roles, while the decision point authenticates them

Choose one

1 point

A user successfully signs in to an organization’s network but then requests access to a finance database. Which statement best describes what must happen before the user can read database records?

A
Authentication automatically grants access to every resource the user can reach.
B
Authentication verifies identity, while authorization determines permitted actions on a resource.
C
Authorization verifies identity, while authentication assigns permissions to resources.
D
Authentication and authorization are interchangeable terms for granting access.

Choose one

1 point

An organization wants support staff to reset employee passwords without granting them firewall administration rights. Which approach best uses role-based access control?

A
Assign each user permissions directly on every resource, without using roles.
B
Evaluate device, resource, and environmental attributes for every request.
C
Assign password-reset permissions to a HelpDesk role, then assign support staff to that role.
D
Allow every authenticated employee to administer network settings.

Written response

1 point

A file server stores a list of users and groups that may read or modify a particular file. What is this resource-attached permission mechanism called?

Choose one

1 point

A finance analyst needs to update a specific set of records for a two-week assignment. Which permission plan best applies least privilege?

A
Give the analyst access only to assigned records and remove it when the assignment ends.
B
Give the analyst access to all finance records indefinitely to avoid future access requests.
C
Allow the analyst to administer the database because they need to update records.
D
Grant access to the entire internal network because the analyst is an employee.

Choose one

1 point

A health organization wants access to a record to depend on the clinician’s care unit, the record, and whether the device is approved. Which access-control approach best fits this policy?

A
Grant access based only on whether the clinician has authenticated.
B
Give every clinician access to every patient record through a shared role.
C
Allow access based only on the network address from which the request originates.
D
Permit a clinician to read a record only if it belongs to their care unit and the request uses an approved device.

Written response

1 point

A system component evaluates the applicable policy rules and request information to determine whether access should be allowed. What is this component called?

True or false

1 point

True or false: A device’s presence on an internal network is, by itself, sufficient reason to authorize its access to a protected application.

A
True
B
False

Fill in the blank

1 point

Under a default-deny policy, a request with no rule explicitly permitting it is .

Fill in the blank

1 point

After a person's role changes, their access should be to identify permissions that may no longer be needed.

3 Network Access Control Online Quiz Questions

Related study packs and tools