LESSON 5

It is the method by which systems determine whether and how to admit a user into a trusted area of the organization

• Internet Access

• Access Control

• Control List

• None of the these

Through authentication and authorization, access control policies make sure users are who they say they are and that they have appropriate access to company data.

• TRUE

• FALSE

Access control cannot be applied to limit physical access to campuses, buildings, rooms, and data centers

• TRUE

• FALSE

It grants access based on defined business functions rather than the individual user’s identity.

• Mandatory access control

• Role-based access control

• Attribute-based access control

• Discretionary access control

In this method, the owner or administrator of the protected system, data, or resource sets the policies for who is allowed access.

• Mandatory access control

• Role-based access control

• Attribute-based access control

• Discretionary access control

It’s common in government and military environments.

• Mandatory access control

• Role-based access control

• Attribute-based access control

• Discretionary access control

Attribute-based access control draws on a set of characteristics called “attributes.”

• TRUE

• FALSE

Without a robust access control policy, organizations risk data leakage from both internal and external sources.

• TRUE

• FALSE

A firewall is a network security device that monitors incoming and outgoing network traffic and permits or blocks data packets based on a set of security rules.

• TRUE

• FALSE

Intrusion is when attacker attempts to gain entry or disrupt normal operation

• TRUE

• FALSE