Exam 4: Access Control

An access right describes the way in which a subject may access an object.

A user program executes in a kernel mode in which certain areas of memory are protected from the user's use and certain instructions may not be executed.

The NIST model defines two types of role hierarchies: general role hierarchies and ___________ hierarchies.

X.800 defines __________ as the prevention of unauthorized use of a resource, including the prevention of use of a resource in an unauthorized manner.

Access control is the central element of computer security.

A(n)__________ is a resource to which access is controlled.

Any program that is owned by,and SetUID to,the "superuser" potentially grants unrestricted access to the system to any user executing that program.

The __________ user ID is exempt from the usual file access control constraints and has system wide access.

The final permission bit is the _________ bit.

_________ is the granting of a right or permission to a system entity to access a system resource.

__________ controls access based on comparing security labels with security clearances.

An independent review and examination of system records and activities in order to test for adequacy of system controls,to ensure compliance with established policy and operational procedures,to detect breaches in security,and to recommend any indicated changes in control,policy and procedures is a(n)__________ .

The __________ functions include the following: create a user session with a default set of active roles; add an active role to a session; delete a role from a session; and check if the session subject has permission to perform a request operation on an object.

A constraint is a defined relationship among roles or a condition related to roles.

__________ Separation of Duty enables the definition of a set of mutually exclusive roles,such that if a user is assigned to one role in the set,the user may not be assigned to any other role in the set.

A __________ access control scheme is one in which an entity may be granted access rights that permit the entity,by its own volition,to enable another entity to access some resource.

__________ refers to setting a maximum number with respect to roles.

Reliable input is an access control requirement.

T F 4.External devices such as firewalls cannot provide access control services.

Traditional RBAC systems define the access rights of individual users and groups of users.