A company assigns employees to roles such as Manager, Engineer, and HR. Each role has specific access to systems and data based on job responsibilities. Which access control model is being used?
A user is allowed to access a system during work hours but is denied access at night, even though they normally have permission. What type of access control is being applied?
An employee creates a file and chooses to give one coworker edit access and another coworker view-only access. Which access control model does this represent?
A government system assigns users and files classifications such as Confidential, Secret, and Top Secret. Users cannot access information above their clearance level. Which access control model is being used?
A user with Secret clearance attempts to read a Top Secret document and is denied. Which rule is being enforced?
A user with Top Secret clearance tries to write information into a Confidential file and is denied. Which rule is being enforced?
A company allows employees to access files based on their job role, but also blocks access if the user is not connected to the company network. Which statement best describes this setup?
A company uses a system where file owners decide who can access their files, but administrators can override permissions if needed. Which access control model is this?
A company wants to ensure that employees can only access the systems needed for their job and nothing more. Which principle are they applying?
An attacker gains access to an employee account, but the attacker cannot access sensitive systems because the account has limited permissions. What security principle helped limit the damage?
A file has the permissions rwxr-x---. What level of access does the group have?
A file has the permissions rwxr-x---. What level of access do other users have?
A system administrator runs the command ls - l. What information are they trying to view?
A user wants to change file permissions in Linux. Which command should they use?
A file is set to chmod750. What level of access does the group have?
A file is set to chmod543. What level of access do other users have?
A developer sets a file to chmod777 so that everyone can access it. What is the biggest security concern?
A company allows all employees full access to all files and systems, regardless of their role. What is the most likely risk?
A company assigns access based on job roles, but does not update permissions when employees change positions. What problem could this cause?
A user logs in from an unusual location and is denied access, even though they have permission. What type of control caused this?
A company wants maximum security and uses strict classification levels that users cannot change. Which model should they use?
A file owner accidentally gives access to a sensitive file to the wrong person. Which access control model allowed this to happen?