Section 20 Access Control

Question 1

Methods used to secure data and information by verifying a user has permissions to read, write, delete, or otherwise modify it.

Answer 1

Access Control

Question 2

The access control policy is determined by the owner.

Answer 2

Discrecretionary Access Control (DAC)

Question 3

An access control policy where the computer systems determines the access control for an object.

Answer 3

Mandatory Access Controls (MAC)

Question 4

Label based access control that defines whether access should be granted or denied to objects by comparing the object label and the subject label.

Answer 4

Rule Based Access Control

Question 5

Utilizes complex mathematics to create sets of objects and subject to define how they interact.

Answer 5

Lattice Based Access Control (LBAC)

Question 6

An access model that is controlled by the system (like MAC) but utilizes a set of permissions instead of a single data label to define the permission level.

Answer 6

Role Based Access Control (RBAC)

Question 7

An access model that is dynamic and context aware using IF-THEN statements.

Answer 7

Attribute Based Access Control (ABAC)

Question 8

Requires more than one person to conduct a sensitive task or operation.

Answer 8

Separation of Duties

Question 9

Occurs when users are cycled through various jobs to learn the overall operations better, reduce their boredom, enhance their skill level, and most importantly, increase our security.

Answer 9

Job Rotation

Question 10

Permissions assigned to a given user.

Answer 10

User Rights

Question 11

Collection of users based on common attributes (generally work roles).

Answer 11

Groups

Question 12

Program in Linux that is used to change the permissions or rights of a file or folder using a shorthand number system.

Answer 12

Chmod

Question 13

4

Answer 13

R (READ)

Question 14

2

Answer 14

W (WRITE)

Question 15

1

Answer 15

X (EXECUTE)

Question 16

Occurs when a user get additional permission overtime as they rotate through different positions or rules.

Answer 16

Privilege Creep

Question 17

Process where each user’s rights and permissions are revalidated to ensure they are correct.

Answer 17

User Access Recertificaiton

Question 18

Occurs when permissions are passed to a subfolder from the parent through inheritance.

Answer 18

Propagation

Question 19

Contain uppercase letters, lowercase letters, numbers, special characters, and at least 8 characters or more (preferably 14 or more).

Answer 19

Strong Passwords

Question 20

A security component in windows that keeps every user in standard user mode instead of acting like an admin user.

Answer 20

User Account Control (UAC)