Exam 9: Access Control Fundamentals

____ is considered a more "real world" access control than the other models because the access is based on a user's job function within an organization.

Describe the Bell-LaPadula model.

List two of the most common types of authentication and AA servers.

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

The ____ model is the least restrictive.

A computer user may be authorized or granted permission to log on to a system by presenting valid credentials, yet that authorization does not mean that the user can then access any and all resources.

The X.500 standard defines a protocol for a client application to access an X.500 directory called ____.

____ attacks may allow an attacker to construct LDAP statements based on user input statements.

Often ____________________ results from a single user being trusted with a set of responsibilities that place the person in complete control of the process.

____ is an authentication system developed by the Massachusetts Institute of Technology (MIT) and used to verify the identity of networked users.

The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.

A user under Role Based Access Control can be assigned only one ____.

Describe the MAC lattice model.

____ requires that if the fraudulent application of a process could potentially result in a breach of security, then the process should be divided between two or more individuals.

List two major access control models.

TACACS+ and RADIUS are designed to support hundreds of remote connections.

A user accessing a computer system must present credentials or ____ when logging on to the system.

____ is suitable for what are called "high-volume service control applications" such as dial-in access to a corporate network.

A shield icon warns users if they attempt to access any feature that requires UAC permission.

____ is an authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.