MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is a defining feature of non-discretionary access control in cloud environments?
a. Resource owners manage access privileges directly
b. Access is determined by central policy and rules
c. End-users customize permissions as needed
d. Access is always temporary and dynamic
Answer: bsearchinform+2
Which access control model is commonly categorized as non-discretionary?
a. Attribute-Based Access Control
b. Discretionary Access Control
c. Mandatory Access Control
d. User-Centric Access Control
Answer: ctechprescient+2
In non-discretionary access models, who primarily enforces the access policies?
a. Resource owner
b. Administrator/system
c. User group leader
d. Application vendor
Answer: bcsrc.nist+2
A primary advantage of non-discretionary access control is:
a. High flexibility
b. Rigid enforcement and reduced risk of human error
c. User delegation
d. Unlimited access privileges
Answer: bfirewalltimes+2
Role-Based Access Control (RBAC) is considered:
a. Discretionary
b. Non-discretionary
c. Temporary
d. Voluntary
Answer: bsearchinform+2
Which is NOT a type of non-discretionary access control?
a. RBAC
b. MAC
c. ABAC
d. DAC
Answer: dtechprescient+2
Which attribute is most likely used to grant access in non-discretionary models?
a. Individual user’s personal preference
b. User’s security clearance or role
c. User’s password complexity
d. User’s location only
Answer: bcsrc.nist+2
What is a key principle of the RBAC model in cloud computing?
a. Access is based on user identity
b. Access is based on resource ownership
c. Access is based on job roles and responsibilities
d. Access is temporary by default
Answer: citexamanswers+2
In MAC, how are access rights usually established?
a. By file owner
b. By pre-configured policy and security labels
c. By end-users
d. By service provider contracts
Answer: btechprescient+2
Which statement is true about non-discretionary access?
a. It provides less accountability than discretionary models
b. It centralizes control at system or admin level
c. It is rarely used in public cloud
d. It allows users to delegate their permissions freely
Answer: bsearchinform+2
The “principle of least privilege” is primarily enforced in cloud via:
a. Non-discretionary access controls
b. Discretionary controls
c. Broad user delegation
d. Social login integrations
Answer: acsrc.nist+2
A benefit of using non-discretionary models in compliance-heavy industries is:
a. Ad-hoc and flexible permissions
b. Automated, auditable, and consistent enforcement
c. Open administrative access
d. User-managed encryption keys
Answer: btechprescient+2
What is one reason human error risk is lower in NDAC systems?
a. Full customization by end users
b. Automated policy enforcement
c. Decentralized management
d. All users act as admins
Answer: bfirewalltimes+2
What is a common example of non-discretionary control in a cloud service?
a. User sets their own file sharing options
b. Admin assigns roles to users
c. Users exchange admin rights
d. End-users create access audit logs
Answer: bitexamanswers+2
How does NDAC affect access review and auditing?
a. Makes it more complex and opaque
b. Simplifies and automates audit logging
c. Allows users to hide their activity
d. Restricts system-wide log access
Answer: bitexamanswers+2
In a cloud environment, NDAC best supports which operational goal?
a. Unlimited resource sharing
b. Consistent and minimal access rights
c. Anonymous access
d. Isolated, local system management
Answer: bsearchinform+2
Non-discretionary access control reduces:
a. Central management
b. Risks associated with user self-management
c. Automation in access decisions
d. Policy standardization
Answer: bitexamanswers+2
The policy decision point in NDAC typically resides:
a. With the resource owner
b. Within the centralized access control mechanism
c. With third-party service providers
d. Randomly selected users
Answer: btechprescient+2
Non-discretionary access models are crucial for:
a. Ad-hoc cloud collaboration scenarios
b. Organizations with strict regulatory requirements
c. Environments with no security regulations
d. Guest user provisioning only
Answer: bpingidentity+2
The attribute-based model in NDAC focuses on:
a. Direct user selection
b. Predefined user/resource characteristics
c. Owner’s temporary decisions
d. Guest access only
Answer: bstrongdm+2
If an access model prevents users from granting rights to others, it is:
a. Discretionary
b. Non-discretionary
c. Identity-based only
d. Trust-based
Answer: bcsrc.nist+2
How does NDAC contribute to cloud security?
a. Enables easier user delegation
b. Prevents unauthorized access through strict role/policy enforcement
c. Supports public resource sharing by default
d. Avoids all automation
Answer: bsearchinform+2
In a non-discretionary system, which action is typical for the system administrator?
a. Defining user roles and mappings
b. Allowing users to transfer their rights freely
c. Delegating all decisions to resource owners
d. Ignoring the principle of least privilege
Answer: aitexamanswers+2
Which is NOT a characteristic of NDAC?
a. Centralized management
b. Automated enforcement
c. Owner-driven permission setting
d. Granular policy-based access
Answer: ccsrc.nist+2
What is a likely consequence of over-privileged users in discretionary models not present in NDAC?
a. Increased risk of data breach
b. Better compliance
c. Automated audit trails
d. Centralized role assignment
Answer: atechprescient+2
Which technique does NDAC leverage to reduce privilege escalation risks?
a. Least privilege assignment
b. Unrestricted delegation
c. Guest provisioning
d. Anonymous authentication
Answer: asearchinform+2
What is true about user intervention in NDAC?
a. Highly encouraged
b. Prohibited or minimized
c. Required for all access decisions
d. Decentralized across tenants
Answer: bcsrc.nist+2
The RBAC model is well-suited to cloud scenarios because:
a. User permissions rarely change
b. Roles can be mapped to job functions and automated
c. Roles are defined only by system vendors
d. Users act as their own administrators
Answer: bstrongdm+2
An NDAC policy may limit a cloud user to:
a. Only the permissions strictly required for their job role
b. Full access to all resources by default
c. Managing all group memberships
d. Revoking admin privileges from others
Answer: aitexamanswers+2
Which mechanism ensures transparency and accountability in NDAC?
a. Anonymous login solution
b. Comprehensive audit logging
c. Password-only authentication
d. Peer-to-peer sharing
Answer: btechprescient+2
In NDAC, changing a user’s permissions usually requires:
a. An administrator modifying a user’s role or policy assignment
b. The user’s direct approval
c. Client-side automation scripts
d. Time-based self-elevation
Answer: asearchinform+2
What is a typical use case for NDAC in public cloud environments?
a. Multi-tenant environments with strict separation
b. Peer-to-peer file transfer networks
c. Small group file sharing
d. Decentralized admin privileges
Answer: apingidentity+2
In NDAC, resource access decisions are:
a. Manual and flexible
b. Automated and policy-driven
c. Made by file owners each time
d. Based solely on user opinion
Answer: bpingidentity+2
Which term best describes NDAC in terms of enforcement?
a. Discretionary
b. Voluntary
c. Uniform and systemic
d. Casual
Answer: ccsrc.nist+2
The least privilege principle in NDAC refers to:
a. Granting only required resources for defined roles
b. Universal admin rights for all users
c. Allowing permanent overrides by resource owners
d. Peer-managed permissions
Answer: atechprescient+2
What aspect does NDAC prioritize compared to DAC?
a. Security, consistency, and compliance
b. Customization and ad-hoc sharing
c. User-centric permission adjustment
d. Open cloud federation
Answer: asearchinform+2
Cloud providers deploy NDAC mechanisms to:
a. Assure regulatory alignment
b. Provide users with unrestricted sharing ability
c. Allow externally managed policies only
d. Migrate away from automation
Answer: aitexamanswers+2
When would a cloud administrator opt for a non-discretionary model?
a. To automate access controls and reduce subjectivity
b. To allow end-users extensive flexibility
c. For ease of external collaboration only
d. For hobbyist projects mainly
Answer: aitexamanswers+2
What is a core driver for deploying NDAC in critical infrastructures?
a. Minimizing human discretion in sensitive resource access
b. Accelerating group-based delegation
c. Encouraging discretionary privileges
d. Inspiring role reversal among users
Answer: apingidentity+2
Which is a false statement about NDAC?
a. It allows users to freely share access controls
b. It prevents manual delegation of access rights
c. It is enforced by centrally defined policies
d. It reduces insider threat risk
Answer: acsrc.nist+2
In NDAC, which function can auditing serve?
a. Prove regulatory compliance and investigate incidents
b. Enable policy overrides by users
c. Remove all administrator responsibilities
d. Allow per-session user-adapted controls
Answer: atechprescient+2
Non-discretionary enforcement for resource access identifies users by:
a. Roles, attributes, or security level
b. Peer preference
c. Random assignment
d. Biometrics only
Answer: asearchinform+2
The ABAC (Attribute-Based Access Control) model is considered:
a. Discretionary
b. Non-discretionary
c. Coercive
d. Manual
Answer: bstrongdm+2
Which model offers strictest centralized enforcement in NDAC?
a. DAC
b. RBAC
c. MAC
d. Self-Service Control
Answer: ccsrc.nist+2
If an organization needs fine-grained cloud permissions, NDAC enables:
a. Automation of policy-based access granted by roles or attributes
b. Continuous user approval checks
c. Irregular user-driven policy creation
d. Unlimited user administrative rights
Answer: apingidentity+2
Why is NDAC considered highly auditable?
a. All access attempts and policy enforcement actions are logged centrally
b. Only user-specific changes are tracked
c. System ignores access violations
d. Audit is manual and optional
Answer: aitexamanswers+2
In NDAC, privileges are commonly:
a. Assigned based on function and not by random assignment
b. Grantable by any user at any time
c. Decided arbitrarily by resource owners
d. Left open to public vote
Answer: atechprescient+2
A hospital’s cloud application is best protected by:
a. NDAC models to restrict access based on roles and clearance
b. Open access for all personnel
c. DAC only for file owners
d. Password-only controls
Answer: apingidentity+2
Which is a management challenge unique to NDAC?
a. Maintaining detailed and updated policies and role mappings
b. Handling constant user requests for exceptions
c. Allowing users to grant their colleagues’ rights easily
d. Removing audit capability from access logs
Answer: asearchinform+2
An NDAC policy in cloud may stipulate that:
a. Only IT staff with the “DatabaseAdmin” role may access database servers
b. All users grant themselves database access anytime
c. Database owners may freely assign admin privileges
d. Access is determined by random selection
Answer: aitexamanswers+2

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info