access control

Question 1

____ are data, applications, systems, networks, and physical space are classified as what?

Answer 1

objects

Question 2

_____ are the users, applications, or processes that need access to objects.

Answer 2

subjects

Question 3

what are the AAA’s of access control

Answer 3

authentication
authorization
auditing

Question 4

______ access control stops unwanted or unauthorized activity

Answer 4

preventative

Question 5

_____ access control searches for details about the attack or the attacker

Answer 5

detective

Question 6

______ access control implements short-term repairs to restore basic functionality following an attack

Answer 6

corrective

Question 7

______ access control discourages continued or escalating of attack during an attack

Answer 7

deterrent

Question 8

_____ access control restores the system to normal operations after the attack and short-term stabilization period

Answer 8

recovery

Question 9

alternatives to primary access control is called

Answer 9

compensative

Question 10

______ controls are policies that describe accepted practices.

Answer 10

administrative

Question 11

_____ controls are computer mechanisms that restrict access.

Answer 11

technical

Question 12

an arrangement made among multiple enterprises that lets subscribers use the same identification data to obtain access to the networks of all enterprises in the group

Answer 12

Federated identity management (FIM)

Question 13

this access control model is centralized and uses clearance and classification labels

Answer 13

bell la-padula and

biba

Question 14

_____ is a non discretionary
access control model based on controlled intermediary access application that prevent direct access to the back-end database

Answer 14

clark-wilson

Question 15

____ states that a system should never reside in a non-secure state

Answer 15

state machine

Question 16

this access control model, addresses commercial integrity, fair competition, and the avoidance of conflict of interest

Answer 16

brewer and nash

Question 17

this access control model is mathematical and used for predicting and testing security systems

Answer 17

take-grant

Question 18

_____ models are academic and mathematical models developed for the analysis of security that present guidelines for the implementation of system security

Answer 18

access control

Question 19

this bell lapudula’s principle imposes a no read up rule

Answer 19

simple security property

Question 20

this bell lapudula’s principle imposes a no write down rule.

Answer 20

star property

Question 21

this bell lapudula’s principle imposes a no write up or read down rule

Answer 21

strong star property

Question 22

the ______ and ____ uses the MAC model

Answer 22

bell lapadula and

biba

Question 23

this biba principle imposes a no write up rule to avoid corrupting data at higher levels.

Answer 23

star integrity axiom

Question 24

this biba principle imposes a no read down rule to avoid obtaining corrupted data from lower levels

Answer 24

simple integrity axiom