Chpt 1

Question 1

How does authorization fit into a security plan?

Answer 1

Once a subject is authenticated, it’s Access must be authorized.

Question 2

What is the importance of accountability?

Answer 2

Security policies can only be enforced if accountability is held. This relays on the capability to prove a subjects identity and track activities.

Question 3

What are the 8 primary security roles?

Answer 3

1. Senior manager
2. Organizational owner
3. Upper management
4. Security professional
5. User
6. Data owner
7. Data custodian
8. Auditor

Question 4

What is abstraction?

Answer 4

Collecting similar elements into groups, classes or roles that are assigned security controls.

Question 5

What are the 5 levels of government classifications?

Answer 5

Classified:
Top secret
Secret
Confidential

UnClassified:
Sensitive
Unclassified

Question 6

What are the 4 levels of private sector classification?

Answer 6

Confidential/Private
Sensitive
Public