SECURITY & ACCESS CONTROL MODELLING — Learn free

Self-check

Questions 1–10 of 10

1. What does Security & Access Control Modelling define?
Question 1A. How data is physically partitioned across disksB. Structured rules for who can access what data, under which conditions and in what mannerC. The semantic meaning of business conceptsD. The schedule for refreshing a data warehouseE. The calculation logic of machine learning features
2. Which of the following is NOT one of the core entities defined in Security & Access Control Modelling?
Question 2A. UsersB. RolesC. PermissionsD. PoliciesE. Dimensions
3. In a typical access control model, how are users, roles and permissions connected?
Question 3A. Permissions are assigned directly to users, and roles are decorative labelsB. Roles are assigned to permissions, and users inherit nothingC. Users are assigned to roles, and roles carry permissionsD. Users and roles are the same entityE. Policies replace both roles and permissions
4. What does Row-Level Security (RLS) do?
Question 4A. Restricts access to specific rows based on attributes such as branch assignmentB. Masks or hides sensitive columns such as SalaryC. Encrypts the entire table at restD. Limits the number of rows a query may returnE. Prevents users from creating new tables
5. Which control masks or hides sensitive fields such as LoanAmount?
Question 5A. Row-Level SecurityB. Attribute-Based Access ControlC. Policy-based time restrictionsD. Column-Level SecurityE. Role explosion
6. What does Attribute-Based Access Control (ABAC) base its rules on?
Question 6A. Only the user's job titleB. Only the table's primary keyC. The database vendor's default settingsD. The order in which users were createdE. User attributes, data attributes and environmental conditions
7. In the loan approval example from I Am Datapedia!, what condition applies to Risk Managers' full access?
Question 7A. Only for loans in their own branchB. Only during office hours and from corporate-managed devicesC. Only for loans below a certain amountD. Only after approval by a Branch OfficerE. Only through the BI dashboard
8. What is 'role explosion'?
Question 8A. A security breach caused by a compromised administrator roleB. The automatic deletion of unused rolesC. A situation where too many narrowly defined roles become difficult to manageD. The merging of all roles into a single super-user roleE. A performance failure when a role has too many users
9. What is 'access creep'?
Question 9A. Slow query performance caused by security checksB. The gradual expansion of a data warehouseC. Users losing permissions after a role changeD. Users accumulating permissions over time without disciplined governanceE. Unauthorised access by external hackers
10. Which regulations are named as examples that a well-designed security model helps comply with?
Question 10A. GDPR and PCI DSSB. SOX and Basel IIIC. HIPAA and FERPAD. ISO 9001 and ISO 14001E. COBIT and ITIL