220 Chapter 9 ■ Practice Test 1
- If Alex hires a new employee and the employee’s account is provisioned after HR manually
inputs information into the provisioning system based on data Alex provides via a series of
forms, what type of provisioning has occurred?
A. Discretionary account provisioning
B. Workflow-based account provisioning
C. Automated account provisioning
D. Self-service account provisioning - Alex has access to B, C, and D. What concern should he raise to the university’s identity
management team?
A. The provisioning process did not give him the rights he needs.
B. He has excessive privileges.
C. Privilege creep may be taking place.
D. Logging is not properly enabled. - When Alex changes roles, what should occur?
A. He should be de-provisioned and a new account should be created.
B. He should have his new rights added to his existing account.
C. He should be provisioned for only the rights that match his role.
D. He should have his rights set to match those of the person he is replacing. - Robert is reviewing a system that has been assigned the EAL2 evaluation assurance level
under the Common Criteria. What is the highest level of assurance that he may have about
the system?
A. It has been functionally tested.
B. It has been structurally tested.
C. It has been formally verified, designed, and tested.
D. It has been semiformally designed and tested. - Adam is processing an access request for an end user. What two items should he verify
before granting the access?
A. Separation and need to know
B. Clearance and endorsement
C. Clearance and need to know
D. Second factor and clearance
8 7. During what phase of the electronic discovery reference model does an organization ensure
that potentially discoverable information is protected against alteration or deletion?
A. Identification
B. Preservation