grade 12 Access Control & Transaction Properties

What does MAC stand for in access control?

• Mobile Application Center

• Media Access Control

• Memory Access Code

• Mainframe Access Control

Define Discretionary Access Control (DAC).

• A security model where access is controlled by a central authority

• A security model where access is controlled by the system administrator

• A security model where access is controlled by the user's role

• A security model where the owner of an object controls access and permissions.

Explain the concept of Role-based Access Control (RBAC).

• RBAC is a method of granting access based on the user's IP address

• RBAC is a method of restricting access based on the user's age

• RBAC is a method of controlling access based on the user's favorite color

• RBAC is a method of restricting network access based on the roles of individual users within an enterprise.

What is Rule-based Access Control in terms of access control?

• Rule-based Access Control is a method of granting access to all users without any restrictions.

• Rule-based Access Control is a method of restricting access based on biometric authentication.

• Rule-based Access Control is a method of restricting access to resources based on a set of rules defined by a system administrator or security policy.

• Rule-based Access Control is a method of restricting access based on user popularity.

Describe Attribute-based Access Control (ABAC).

• Attribute-based Access Control (ABAC) is a security model that defines access control based on attributes associated with users, resources, and the environment. It evaluates rules and policies to determine access rights.

• Attribute-based Access Control (ABAC) is a security model that evaluates access based on historical data.

• Attribute-based Access Control (ABAC) is a security model that relies on biometric authentication.

• Attribute-based Access Control (ABAC) only considers user roles for access control.

What are the properties of a transaction in ACID?

• Atomicity

• Consistency

• Isolation

• Volatility

• Atomicity, Consistency, Isolation, Durability

In Mandatory Access Control (MAC), who determines access permissions?

• System administrator or security policy administrator

• Application developers

• End-users

• Network devices

Give an example of a scenario where Discretionary Access Control (DAC) would be useful.

• Small business setting where employees need to share specific files with each other but not with everyone in the organization.

• Government agency managing classified information

• Personal computer with only one user

• Public library system with open access to all files

How does Role-based Access Control (RBAC) simplify access management?

• RBAC organizes permissions based on roles rather than individual users.

• RBAC limits access management capabilities

• RBAC does not differentiate between roles and permissions

• RBAC assigns permissions randomly to users

What are the key components of Rule-based Access Control?

• permissions

• conditions

• subjects, objects, rules

• users