Access Control

Question 1

Access Control Models

Answer 1

Access control ensures that only authenticated and authorized entities can access resources.
Role-based access control (role-BAC)
Rule-based access control (rule-BAC)
Discretionary access control (DAC)
Mandatory access control (MAC)

Question 2

Role-based access control (role-BAC)

Answer 2

A role-BAC model uses roles based on jobs and functions. A matrix is a planning document that matches the roles with the required privileges. reduce the administrative workload. Users within a group automatically inherit the
privileges assigned to the group.

Question 3

Rule-based access control (rule-BAC)

Answer 3

Common to use Routers and firewalls which use rules within access control lists (ACLs). Some rules are dynamic and react to events modifying the ACL.

Question 4

Discretionary Access Control (DAC)

Answer 4

Every object (such as files and folders) has an owner, and the owner establishes access for the objects.

Question 5

Mandatory Access Control (MAC)

Answer 5

uses labels (sometimes referred to as sensitivity labels or security labels) to
determine access.