Best Practices for Access Control

Question 1

Implicit Deny

Answer 1

All access to a resource is denied by default. Access must be explicitly granted.

Question 2

Explicit Deny

Answer 2

Access is granted by default until explicitly denied.

Jenny

Question 3

Least Privilege

Answer 3

Users are given lowest level access needed to perform their job function.

Question 4

Separation of Duties

Answer 4

Sensitive tasks must use more than one person to conduct them.

An admin user can have an admin account as well as a user account. The individual uses the user account for normal activities and only uses the admin account for tasks that require admin privilege. This is considered a type of separation of duty.

Question 5

Job Rotation

Answer 5

Users are rotated through different jobs to learn more as well as increasing security by helping identify theft, fraud, and abuse of position.