Exam 5: ID and Access

What is made up of hardware, software, and firmware components that fall within the TCB and enforces the reference monitor concept?

What could a company do to prevent an employee from accessing a higher level of access by preventing them from even knowing it exists?

What protocol combines the authentication and authorization functionality?

What is based on the sensitivity of data and knows what actions should be allowed?

Biometrics measures unique personal attributes or behaviors. What type of biometric analysis is the most accurate?

Olivia provided security features that control how users and systems communicate and interact with other systems and resources. What did Olivia create?

What category is involved with access control layers?

What type of access control synchronizes with the authentication service by using time or a count as the core piece of the authentication process?

What broad term encompasses the use of different products to identify, authenticate, and authorize users through automated means?

Once an organization determines it needs to have access control techniques and technologies in place, it must choose which kind. What kind uses specific rules that indicative what can and cannot happen between a subject and an object?

Jeffery is signing in to his network station and is being challenged by a random value called a nonce. Why type of device is this?

What is defined as a set of objects that a subject is able to access?

There are two processes taking place at the same time, as in data within a variable, through a shared resource, in an incorrect order. What term is being applied?

What security measure analysis is a unique personal attribute or behavior?

Access control layers consist of administrative controls, physical controls, and technical controls that work at different levels of what?

Biometrics measures unique personal attributes or behaviors. What type of biometric analysis looks at different peaks and valleys of the hand?

What method gives control of access to the people that are closer to the resources that may better understand who should and should not have access to certain files, data, and resources?