ACCESS CONTROL

Question 1

Known as an identity based access control model

Answer 1

Discretionary access control

Question 2

A central authority determines which files a user can access

Answer 2

Non discretionary access control

Question 3

Best describes a rule based access control model

Answer 3

Uses global rules to apply to all users equally

Question 4

Access control model on a firewall

Answer 4

Rule based

Question 5

What type of access controls rely on the use of labels

Answer 5

Mandatory

Question 6

Characteristic of mandatory access control

Answer 6

Prohibitive

Question 7

Role based access control

Answer 7

Groups users into roles based on organisations hierarchy.

Any question mentioning hierarchy is always going to be role based ACL

Question 8

Rule based access control

Answer 8

Uses global rules applied to all users equally

Question 9

Bell La Padula

Answer 9

Simple security property- not allowed to read up (obvious). “No read up”
 * Security property-not allowed to write to lower level “ no write down”
Strong star (*)- can not read or write to an object of higher/lower sensitivity 

DOESNT DEAL WITH COVERT CHANNELS

Question 10

BIBA

Answer 10

No read down
No write up

• • always is write