5-32.1 Access Control Fundamentals

Question 1

Ability of a subject to take an action (e.g. install software)

Answer 1

Rights

Question 2

Demonstrated reason for access

Answer 2

Need to know

Question 3

Minimum set of rights and permissions needed to accomplish a task

Answer 3

Principle of least privilege

Question 4

Accumulation of rights, permissions, and privileges over time

Answer 4

Authorization creep

Question 5

Term used to describe accounts that have persistent privileged access 24x7x365.

Answer 5

Standing privilege