FirstTry
Objective 3.2CC

3.2 Understand logical access controls.

Objective 3.2 sits in Access Control Concepts, which carries 22% of the Certified in Cybersecurity exam. The questions below are original, written from the official objective title above, and each explanation cites the ISC2 page it rests on.

Objective title verbatim from the official objectives. ISC2 exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

3-2Access Control ConceptsEasy

Verifying an identity and approving a requested action are two different processes. Which pair names them in order?

Auditing, then accountingAuditing and accounting record what happened after access decisions.
Identification, then federationFederation shares identity across systems; it is not the approval step.
Authorization, then authenticationReversed: approval cannot be decided before identity is known.
Authentication, then authorizationCorrect · your answerCorrect. Identity first, approval of actions second.

Correct.

Concept

Access control splits into proving who an entity is and deciding what that entity may do; systems that blur the two grant the wrong things to the right people.

Why D

Authentication verifies an entity's identity; authorization then verifies that a requested action or service is approved for that specific entity.

Source

#authorization#authentication#definitions

Now you: objective 3.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

3-2Access Control ConceptsModerate

A logged-in user tries an admin-only action and is refused. What does this demonstrate?

Sample question 2 of 3

3-2Access Control ConceptsModerate

A visitor with no account loads a site's login page and logo image freely. How is that consistent with access control?

Sample question 3 of 3

3-2Access Control ConceptsModerate

At your company, an accountant requests the customer database and a sales rep requests payroll. Least privilege says what?

Full Certified in Cybersecurity question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Access Control Concepts