Section 20: Access Control

Question 1

Access Control Models

Answer 1

DAC, MAC, RBAC, ABAC

Question 2

Discretionary Access control

Answer 2

The access control policy is determined by the owner

Question 3

Mandatory Access Control

Answer 3

An access control policy where the computer gets to control who gets access, does it through data labels (used in FreeBSD and Linux)

Question 4

Rule Based Access Control

Answer 4

Label-based access control that defines whether access

Question 5

Lattice Based Access Control

Answer 5

Utilizes complex mathematics

Question 6

Role-Based Access Control

Answer 6

An access model that is controlled by the system (like MAC) but utilizes roles in order to dole out access

Question 7

Attribute Based Access Control

Answer 7

think tags

Question 8

Implicit Deny

Answer 8

All access is denied by default unless specifically stated

Question 9

Least Privilege

Answer 9

Only allowed to do what is needed to do their job

Question 10

Separation of Duties

Answer 10

Requires more than one person to conduct a sensitive task or operation (think two people signing a check)

Question 11

Job Rotation

Answer 11

Occurs when users are cycled through various jobs to learn the overall operations of the company

Question 12

Mandatory Vacation

Answer 12

Making someone take a vacation so you can audit them

Question 13

Organizational Unit in AD

Answer 13

Departments in the company

Question 14

User Rights

Answer 14

Permissions assigned to a given user

Question 15

Groups

Answer 15

Collection of users based on common attributes

Question 16

chmod

Answer 16

Program in Linux that is used to change the permissions or rights of a file or folder using a shorthand number system (Read=4, Write=2, Execute=1)

Question 17

Privilege Creep

Answer 17

Occurs when a user get additional permission over time as they rotate through different positions or roles

Question 18

User Access Recertification

Answer 18

Process where each user’s rights and permissions are revalidated to ensure they are correct

Question 19

Inheritance

Answer 19

Happens by default; permissions are inherited from the folder above it

Question 20

Propagation

Answer 20

Occurs when permissions are passed to a subfolder from the parent through inheritance

Question 21

Keeping passwords secure best practice

Answer 21

change default

require the password is changed frequently (every 90 days)

always change the default Administrator or Root password

Disable the guest account on your systems

Enable Ctrl+alt+delete for logging into the system

use good, strong policies in regards to your passwords