Deck 9: Access Control Fundamentals

Question 1

The most restrictive access control model is ____.

A) Mandatory Access Control
B) Role Based Access Control
C) Discretionary Access Control
D) Rule Based Access Control

Answer 1

A

Question 2

A user accessing a computer system must present credentials or ____ when logging on to the system.

A) access
B) authorize
C) token
D) identification

Answer 2

D

Question 3

The action that is taken by the subject over the object is called a(n) ____.

A) authorization
B) access
C) control
D) operation

Answer 3

D

Question 4

____ requires that if the fraudulent application of a process could potentially result in a breach of security, then the process should be divided between two or more individuals.

A) Separation of duties
B) Job rotation
C) Mandatory vacation
D) Role reversal

Question 5

____ is suitable for what are called "high-volume service control applications" such as dial-in access to a corporate network.

A) RADIUS
B) ICMP
C) FTP
D) Telnet

Question 6

TACACS+ and RADIUS are designed to support hundreds of remote connections.

Question 7

A(n) ____ is a set of permissions that are attached to an object.

A) ACE
B) DAC
C) entity
D) ACL

Question 8

A computer user may be authorized or granted permission to log on to a system by presenting valid credentials, yet that authorization does not mean that the user can then access any and all resources.

Question 9

The ____ model is the least restrictive.

A) RBAC
B) MAC
C) CAC
D) DAC

Question 10

A user or a process functioning on behalf of the user that attempts to access an object is known as the ____.

A) subject
B) reference monitor
C) entity
D) label

Question 11

Authorization and access are viewed as synonymous and in access control, they are the same step.

Question 12

____ is considered a more "real world" access control than the other models because the access is based on a user's job function within an organization.

A) Role Based Access Control
B) Rule Based Access Control
C) Discretionary Access Control
D) Mandatory Access Control

Question 13

The strength of RADIUS is that messages are always directly sent between the wireless device and the RADIUS server.

Question 14

In the UAC dialog boxes, the color ____ indicates the lowest risk.

A) red
B) gray
C) yellow
D) green

Question 15

____ indicates when an account is no longer active.

A) Password expiration
B) Account expiration
C) Last login
D) Account last used

Question 16

A user under Role Based Access Control can be assigned only one ____.

A) role
B) group
C) label
D) access list

Question 17

A(n) ____ model is a standard that provides a predefined framework for hardware and software developers who need to implement access control in their devices or applications.

A) accounting
B) user control
C) access control
D) authorization control

Question 18

____ accounts are user accounts that remain active after an employee has left an organization.

A) Active
B) Stale
C) Orphaned
D) Fragmented

Question 19

A shield icon warns users if they attempt to access any feature that requires UAC permission.

Question 20

____ is often used for managing user access to one or more systems.

A) Role Based Access Control
B) Mandatory Access Control
C) Rule Based Access Control
D) Discretionary Access Control

Question 21

____________________ is granting or denying approval to use specific resources.

Question 22

List two of the most common types of authentication and AA servers.

Question 23

List the steps for RADIUS authentication with a wireless device in an IEEE 802.1x network.

Question 24

____ is an authentication system developed by the Massachusetts Institute of Technology (MIT) and used to verify the identity of networked users.

A) Aurora
B) Kerberos
C) CHAP
D) TACACS

Question 25

____ is an authentication service commonly used on UNIX devices that communicates by forwarding user authentication information to a centralized server.

A) TACACS
B) RADIUS
C) Kerberos
D) FTP

Question 26

During RADIUS authentication the AP, serving as the authenticator that will accept or reject the wireless device, creates a data packet from this information called the ____.

A) accounting request
B) access request
C) verification request
D) authentication request

Question 27

A RADIUS ____________________ is a computer that forwards RADIUS messages among RADIUS clients and RADIUS servers.

Question 28

Describe the two key elements of the MAC model.

Question 29

Describe the Bell-LaPadula model.

Question 30

Describe how Kerberos works.

Question 31

List two major access control models.

Question 32

The X.500 standard defines a protocol for a client application to access an X.500 directory called ____.

A) DIB
B) DAP
C) DIT
D) LDAP

Question 33

Entries in the DIB are arranged in a tree structure called the ____.

A) DAP
B) PEAP
C) EAP
D) DIT

Question 34

In the DAC model, ____________________ can create and access their objects freely.

Question 35

Often ____________________ results from a single user being trusted with a set of responsibilities that place the person in complete control of the process.

Question 36

____ attacks may allow an attacker to construct LDAP statements based on user input statements.

A) SQL injection
B) Kerberos injection
C) LDAP injection
D) RADIUS injection

Question 37

The capability to look up information by name under the X.500 standard is known as a(n) ____________________-pages service.

Question 38

Describe the MAC lattice model.

Question 39

Discuss the two significant weaknesses of DAC.

Question 40

Describe LDAP injection attacks.

Question 41

Discuss the differences between DAP and LDAP.