Lesson 22

Which of the following describes Discretionary Access Control (DAC)?

• An authorization access model that has security clearance levels or compartments

• An authorization access model that groups users based on administrative or job functions

• An authorization access model that stresses the importance of the owner who has full control over the resource

• An authorization access model in which access is based on policies that are non-discretionary

What is the authorization concept known as implicit deny?

• A principle stating that a user should be granted rights necessary to perform a job and nothing more

• A principle stating that the owner is the central authority and has full control over assigning access to resources

• A principle stating that users are grouped based on administrative or job functions and assigned a template of permissions

• A principle stating that access requires explicit authorization and everything else is rejected

A principle stating that users are only granted the permissions needed to perform a job and nothing more is called the least privilege principle.

• True

• False

Implicit ​ (a)   is a principle stating that unless there is a rule specifying that ​ (b)   should be granted (​ (c)   authorization), any request for access is ​ (d)   This is often seen in firewall policies.

• deny
• access
• explicit
• denied.
• allow
• policies
• implicit
• approved

Grouping users based on administrative function and assign a template of permissions is an authorization access model called

Which non-repudiation mechanism can prove that a person was genuinely operating an account and that it was not hijacked?

• A biometric authentication device

• A video surveillance camera

• A physical or digital signature

• A token or receipt

Which of the following describes Mandatory Access Control (MAC)?

• An authorization access model that stresses the importance of the owner who has full control over the resource

• An authorization access model that has security clearance levels or compartments

• An authorization access model in which access is based on policies that are non-discretionary

• An authorization access model that groups users based on administrative or job functions

What configuration change can help collect tracking information for accountability purposes?

• Using Mandatory Access Control (MAC)

• Using the principle of least privilege

• Preventing users from clearing web browsing history

• Requiring users to authenticate with multiple factors

Which of the following is NOT used as a primary authentication factor?

• Somewhere you are

• Something you know

• Something you are

• Something you have

“Somewhere you ​ (a)   ” is an authentication factor that measures statistics about your specific ​ (b)   location. This can be used to verify that a user comes from a specific country or is logging in from an expected ​ (c)   . This supplements other authentication factors and is not used as a primary authentication factor.

• are
• physical
• region
• know
• previous
• phone