Exam 4: Access Control

There are three key elements to an ABAC model: attributes which are defined for entities in a configuration;a policy model,which defines the ABAC policies;and the __________ model,which applies to policies that enforce access control.

In digital identity systems,a __________ functions as a certification program.

A __________ dictates that a user can only be assigned to a particular role if it is already assigned to some other specified role and can be used to structure the implementation of the least privilege concept.

Basic access control systems typically define three classes of subject: owner,__________ and world.

Reliable input is an access control requirement.

A __________ access control scheme is one in which an entity may be granted access rights that permit the entity,by its own volition,to enable another entity to access some resource.

The basic elements of access control are: subject,__________,and access right.

Traditional RBAC systems define the access rights of individual users and groups of users.

__________ access control controls access based on the roles that users have within the system and on rules stating what accesses are allowed to users in given roles.

__________ refers to setting a maximum number with respect to roles.

The default set of rights should always follow the rule of least privilege or read-only access

__________ is the traditional method of implementing access control.

The three types of attributes in the ABAC model are subject attributes,object attributes,and _________ attributes.

The principal objectives of computer security are to prevent unauthorized users from gaining access to resources,to prevent legitimate users from accessing resources in an unauthorized manner,and to enable legitimate users to access resources in an authorized manner.

__________ access control controls access based on the identity of the requestor and on access rules stating what requestors are or are not allowed to do.

Role hierarchies make use of the concept of __________ to enable one role to implicitly include access rights associated with a subordinate role.

A __________ is an entity capable of accessing objects.

An ABAC model can define authorizations that express conditions on properties of both the resource and the subject.

The __________ component deals with the management and control of the ways entities are granted access to resources.

An access right describes the way in which a subject may access an object.