CISSP Training Guide

Exam Questions

1:	What does granting users access to objects under the principle of least privilege imply? Full control Minimal necessary access No access Role-based access
A1:	B. The principle of least privilege implies users are granted minimal necessary access to perform their work tasks.
2:	Which access control technique uses subject classification to determine access? Discretionary access control Access control lists Mandatory access control Rule-based access control
A2:	C. Mandatory access control must have subject classification to control access. Discretionary, ACLs, and rule-based all employ object-specific controls.
3:	Which type of attack is a spoofing attack? Monitoring attack Spamming attack Active attack Passive attack
A3:	C. Spoofing is an active ...