CompTIA Security+ Certification SY0-601: The Total Course - Access Control Schemes

The video tutorial covers key concepts of authentication and authorization, explaining how identity is verified and permissions are granted. It delves into credential policies for managing access, including policies for employees, contractors, and devices. Various access control schemes are discussed, such as attribute-based, role-based, rule-based, mandatory, and discretionary access control. The tutorial also highlights the importance of physical access control in securing environments.

What is the primary purpose of authentication in access control?

• To assign permissions to resources

• To configure network settings

• To manage user roles

• To prove the identity of a user or device

Which access control scheme uses user attributes to determine permissions?

• Attribute-Based Access Control (ABAC)

• Discretionary Access Control (DAC)

• Mandatory Access Control (MAC)

• Role-Based Access Control (RBAC)

In role-based access control, what is a 'role'?

• A set of conditions for access

• A collection of related permissions

• A type of user account

• A security clearance level

What distinguishes rule-based access control from role-based access control?

• It uses roles to assign permissions

• It relies on user discretion for access

• It is based on physical security measures

• It uses conditional access policies

What is the key feature of mandatory access control (MAC)?

• User discretion in setting permissions

• Use of security labels and clearances

• Physical security measures

• Role assignments for users

In discretionary access control, who typically sets the permissions?

• The operating system

• The network administrator

• The data custodian

• The data owner

Which of the following is an example of physical access control?

• Locked doors and security guards

• Using a VPN tunnel

• Setting file permissions

• Assigning user roles