Chapter 21/22/23

Question 1

Information Vector

Answer 1

Program viruses
Macro Viruses
Worms

Question 2

Implicit Deny

Answer 2

Access controls should deny access by defualt

Question 3

Discretionary Access Control (DAC)

Answer 3

Based on ownership
Owner is granted full control over the resource, meaning that he or she can modify its ACL to grant rights to others

Question 4

Role-Based Access Control (RBAC)

Answer 4

A set of organizational roles are defined and users allocate to those roles

Question 5

Mandatory Access Controls (MAC)

Answer 5

Based on the idea of security clearance levels and labels
Subjects are only permitted to access objects at their own clearance level or below

Question 6

Rule-Based access control

Answer 6

Any sort of access control model where access control policies are determined by system rules rather than system users