What is access control? - ✔✔A security technique that regulates who or what can view
or use resources in a computing environment
It enables administrators to manage access at a more granular level
Authentication - ✔✔A
...
What is access control? - ✔✔A security technique that regulates who or what can view
or use resources in a computing environment
It enables administrators to manage access at a more granular level
Authentication - ✔✔Authentication is the step after identification
It is to determine whether the claim of the identity is true
Because access control is typically based on the identity of the user who requests
access to a resource, authentication is essential to effective security.
What is the role of authorization in access control? - ✔✔Authorization is the step after
authentication.
Authorization allows us to specify where the party should be allowed or denied access.
What is the role of auditing in access control? - ✔✔We perform audits to ensure that
compliance with applicable laws, policies, and other bodies of administrative control is
being accomplished as well as
detecting misuse. We may audit a variety of activities, including compliance with policy,
proper security architecture, configuration management, personal behavior of users, or
other activities.
What are 4 different ways to authenticate a claim of identity? - ✔✔What you know - a
password for an account
What you have - a door key, a smart card
Who you are - fingerprint
What you do - how you pronounce a passphrase
What is multi-factor authentication? - ✔✔A method of computer access control in which
a user is only granted access after successfully presenting evidence to an
authentication mechanism
It decreases the probability of a false positive and increases the probability of a false
negative
Mandatory Access Control (MAC) - ✔✔A model of access control in which the owner of
the resource does not get to decide who gets to access it, but instead access is decided
by a group or individual who has the authority to set access on resources.
Discretionary Access Control (DAC) - ✔✔A model of access control based on access
[Show More]