What is access control? Correct Answer: A security technique that regulates who or what can view or use resources in a computing environment
It enables administrators to manage access at a more granular level
Auth
...
What is access control? Correct Answer: A security technique that regulates who or what can view or use resources in a computing environment
It enables administrators to manage access at a more granular level
Authentication Correct Answer: Authentication is the step after identification
It is to determine whether the claim of the identity is true
Because access control is typically based on the identity of the user who requests access to a resource, authentication is essential to effective security.
What is the role of authorization in access control? Correct Answer: Authorization is the step after authentication.
Authorization allows us to specify where the party should be allowed or denied access.
What is the role of auditing in access control? Correct Answer: We perform audits to ensure that compliance with applicable laws, policies, and other bodies of administrative control is being accomplished as well as
detecting misuse. We may audit a variety of activities, including compliance with policy, proper security architecture, configuration management, personal behavior of users, or other activities.
What are 4 different ways to authenticate a claim of identity? Correct Answer: What you know - a password for an account
What you have - a door key, a smart card
Who you are - fingerprint
What you do - how you pronounce a passphrase
What is multi-factor authentication? Correct Answer: A method of computer access control in which a user is only granted access after successfully presenting evidence to an authentication mechanism
It decreases the probability of a false positive and increases the probability of a false negative
Mandatory Access Control (MAC) Correct Answer: A model of access control in which the owner of
the resource does not get to decide who gets to access it, but instead access is decided by a group or individual who has the authority to set access on resources.
Discretionary Access Control (DAC) Correct Answer: A model of access control based on access
[Show More]