05_身份与访问控制习题（286题）.pdfVIP

Domain 5: Review Questions 1. _____ requires that a user or process be granted access to only those resources necessary to perform assigned functions. A. Discretionary access control B. Separation of duties C. Least privilege D. Rotation of duties 2. What are the seven main categories of access control? A. Detective, corrective, monitoring, logging, recovery, classification, and directive B. Directive, deterrent, preventative, detective, corrective, compensating, and recovery