CS 7643 QUIZ 3 COMPREHENSIVE EXAM SCRIPT COMPLETE QUESTIONS VERIFIED
SOLUTIONS
Question:
(information flow problem).
Answer:
20161018 discretionary access control 2 of 2 controlling who can gain access to data is not possible
___
Question:
can.
Answer:
20161018 mandatory access control a of b organization ___ control how info is shared
Question:
.
Answer:
20161018 mandatory access control b of b address information flow problem
Question:
.
Answer:
20161018 mandatory access control what should MAC do? we have to add some meta-data (labels)
that captures the nature of the info contained in the object
,Question:
.
Answer:
20161018 mandatory access control what should MAC do? Labels: How sensitive? What is the info
about? What kind of info does a user in a certain function/role needs to access?
Question:
.
Answer:
20161018 mandatory access control Label = (sensitivity level, compartment) a compartment could
be a SET
Question:
.
Answer:
20161018 mandatory access control labels can come in many different types used to be "Who can
write and who can read" e.g. maybe a doctor can write.
Question:
labels.
Answer:
20161018 mandatory access control what is most important different between MAC and DAC? A:
___, labels have diff parts, eg. (a) how sensitive info is and (b) what TOPICS does it relate to
Question:
.
Answer:
,20161018 mandatory access control What does "comparing labels" mean?e.g. one lable can
DOMINATE or be stronger than other labels.
Question:
.
Answer:
20161018 mandatory access control comparing labels L1 and L2 L1 = (l1,C1), L2 = (l2,C2) C1 is a
Set and C2 is a Set
Question:
.
Answer:
20161018 mandatory access control comparing labels when you have sets it means that ordering is
ONLY PARTIAL ordering --> partial.mustaque draws a Venn diagram with two circles to
demonstrate the concept Whne you have set you are always goig to have what;s called a PARTIAL
SET
Question:
.
Answer:
20161018 mandatory access control comparing labels L1 = L2 iff l1 = l2 and C1=C2
Question:
contains.
Answer:
20161018 mandatory access control comparing labels how do we know if L1 is stronger or
dominates L2? A: L1 > L2 if l1 >= and C1 ___ C2 or can be written C1 > C2
, Question:
dominates.
Answer:
20161018 mandatory access control comparing labels " > " is called ___
Question:
.
Answer:
20161018 mandatory access control comparing labels how do we know if L1 is stronger or
dominates L2? 1 L1 = L2 2 L1 > L2 3 L1 < L2 if l1 <= l2 and C1 "C" C2 4 If L1<>L2 and L1 not <
L2 and L1 not > L2 then the two labels are not ordered C1 and C2. mustaque draws (again) a Venn
diagram with two circles to demonstrate the concept
Question:
partial ordering.
Answer:
20161018 mandatory access control comparing labels generally we are interested in Labels and a
relation induced on them that defines a LATTICE (another way about the ________ (POSET) that I
am talking about
Question:
least upper bound.
Answer:
20161018 mandatory access control comparing labels Lattice --> poset + ___ (LUB) + greatest
lower band (GLB)
Question:
ordered.
Answer:
SOLUTIONS
Question:
(information flow problem).
Answer:
20161018 discretionary access control 2 of 2 controlling who can gain access to data is not possible
___
Question:
can.
Answer:
20161018 mandatory access control a of b organization ___ control how info is shared
Question:
.
Answer:
20161018 mandatory access control b of b address information flow problem
Question:
.
Answer:
20161018 mandatory access control what should MAC do? we have to add some meta-data (labels)
that captures the nature of the info contained in the object
,Question:
.
Answer:
20161018 mandatory access control what should MAC do? Labels: How sensitive? What is the info
about? What kind of info does a user in a certain function/role needs to access?
Question:
.
Answer:
20161018 mandatory access control Label = (sensitivity level, compartment) a compartment could
be a SET
Question:
.
Answer:
20161018 mandatory access control labels can come in many different types used to be "Who can
write and who can read" e.g. maybe a doctor can write.
Question:
labels.
Answer:
20161018 mandatory access control what is most important different between MAC and DAC? A:
___, labels have diff parts, eg. (a) how sensitive info is and (b) what TOPICS does it relate to
Question:
.
Answer:
,20161018 mandatory access control What does "comparing labels" mean?e.g. one lable can
DOMINATE or be stronger than other labels.
Question:
.
Answer:
20161018 mandatory access control comparing labels L1 and L2 L1 = (l1,C1), L2 = (l2,C2) C1 is a
Set and C2 is a Set
Question:
.
Answer:
20161018 mandatory access control comparing labels when you have sets it means that ordering is
ONLY PARTIAL ordering --> partial.mustaque draws a Venn diagram with two circles to
demonstrate the concept Whne you have set you are always goig to have what;s called a PARTIAL
SET
Question:
.
Answer:
20161018 mandatory access control comparing labels L1 = L2 iff l1 = l2 and C1=C2
Question:
contains.
Answer:
20161018 mandatory access control comparing labels how do we know if L1 is stronger or
dominates L2? A: L1 > L2 if l1 >= and C1 ___ C2 or can be written C1 > C2
, Question:
dominates.
Answer:
20161018 mandatory access control comparing labels " > " is called ___
Question:
.
Answer:
20161018 mandatory access control comparing labels how do we know if L1 is stronger or
dominates L2? 1 L1 = L2 2 L1 > L2 3 L1 < L2 if l1 <= l2 and C1 "C" C2 4 If L1<>L2 and L1 not <
L2 and L1 not > L2 then the two labels are not ordered C1 and C2. mustaque draws (again) a Venn
diagram with two circles to demonstrate the concept
Question:
partial ordering.
Answer:
20161018 mandatory access control comparing labels generally we are interested in Labels and a
relation induced on them that defines a LATTICE (another way about the ________ (POSET) that I
am talking about
Question:
least upper bound.
Answer:
20161018 mandatory access control comparing labels Lattice --> poset + ___ (LUB) + greatest
lower band (GLB)
Question:
ordered.
Answer:
