access controls

Question 1

dac

Answer 1

determined by the owner
every object in the system has an owner, and the owner has control over its access
policy; and second, access rights, or permissions, can be assigned by the owner
to users to specifically control object access.

Question 2

Mandatory access control (MAC)

Answer 2

etermined by a
computer system, not by a user or owner
subjects (users : d objects (files, folders, hardware
devices, network connections

A subject’s label dictates its security level,
or level of trust. An object’s label dictates what level of clearance is needed to access
it, also known as a trust level (this is also known as data labeling ).

Question 3

role based

Answer 3

controlled by the system

sets of permissions, instead of individual permissions that are labelbased. use in GROUPS

Question 4

rule bbased

Answer 4

focus on systems not users

Question 5

eap

Answer 5

802.1x
data link layer
Supplicant: A software client running on a workstation. This is also known as
an authentication agent.
■ Authenticator: A wireless access point or switch.
■ Authentication server: An authentication database, most likely a RADIUS
server

Question 6

rule based

Answer 6

Rule-based access control uses labels, is part of mandatory access control,
and should not be confused with role-based access control.