CS 6238 Midterm NEWEST 2026-2027 ACTUAL
EXAM WITH COMPLETE 75 QUESTIONS AND
CORRECT DETAILED ANSWERS (100%
VERIFIED ANSWERS) ALREADY GRADED A+
PROFESSOR VERIFIED
3 principals of security + 1 - CORRECT ANSWER: Security should be transparent
It should be easy to give access
It should be easy to restrict access
Establish reasonable defaults
A processor does the following: - CORRECT ANSWER: Executes instructions by:
EIP holds pointer to next instruction
Operands point to data which is operated on by an instruction
Executes next instruction
Access Control List - CORRECT ANSWER: The ACL belongs to an object and is a list of all
users who have permission to access
This is like going to a club and having your name on the list.
Stored as metadata for the object
Access Control Matrix - CORRECT ANSWER: An abstracted system state where rows are
active entities/ source of the request and columns are objects or resources
Bell-LaPadula Model - CORRECT ANSWER: Focused on confidentiality, the label has
sensitivity level and compartment. Sensitivity level = TS, S, C, and Unclassified/ Public
, Biometric Diagram - CORRECT ANSWER: User Interface --> Biometric Senor --> Feature
Extraction --> Biometric DB (check for match)
BIPA Model - CORRECT ANSWER: Focuses on integrity
Read up and write down rules
User levels can be low medium and high where low level users cannot produce high integrity
data
BLP Access Rules - CORRECT ANSWER: Simple Security: subject S can read object O if the
label S dominates the label O
*Property: Write up rule: A subject S can only write to an object O if O dominates S
C-List vs ACL: Accountability - CORRECT ANSWER: ACL is better: we just have to find all
the people that have permissions for an object by looking at a list
C-List vs ACL: Overhead of checking permission - CORRECT ANSWER: C-List is better--the
user simply has permissions which is more efficient than checking a list
C-List vs ACL: Revocation - CORRECT ANSWER: ACL is better: we just have to find the entry
in the ACL and delete/ modify it.
Call Gate - CORRECT ANSWER: When trying to access code from a higher privilege level.,
you can go through the call gate
Capability List - CORRECT ANSWER: Belongs to a user and is a list of all objects they have
permission for along with what permissions they have. This is like having a ticket to the movie
theater
Stored with the user
EXAM WITH COMPLETE 75 QUESTIONS AND
CORRECT DETAILED ANSWERS (100%
VERIFIED ANSWERS) ALREADY GRADED A+
PROFESSOR VERIFIED
3 principals of security + 1 - CORRECT ANSWER: Security should be transparent
It should be easy to give access
It should be easy to restrict access
Establish reasonable defaults
A processor does the following: - CORRECT ANSWER: Executes instructions by:
EIP holds pointer to next instruction
Operands point to data which is operated on by an instruction
Executes next instruction
Access Control List - CORRECT ANSWER: The ACL belongs to an object and is a list of all
users who have permission to access
This is like going to a club and having your name on the list.
Stored as metadata for the object
Access Control Matrix - CORRECT ANSWER: An abstracted system state where rows are
active entities/ source of the request and columns are objects or resources
Bell-LaPadula Model - CORRECT ANSWER: Focused on confidentiality, the label has
sensitivity level and compartment. Sensitivity level = TS, S, C, and Unclassified/ Public
, Biometric Diagram - CORRECT ANSWER: User Interface --> Biometric Senor --> Feature
Extraction --> Biometric DB (check for match)
BIPA Model - CORRECT ANSWER: Focuses on integrity
Read up and write down rules
User levels can be low medium and high where low level users cannot produce high integrity
data
BLP Access Rules - CORRECT ANSWER: Simple Security: subject S can read object O if the
label S dominates the label O
*Property: Write up rule: A subject S can only write to an object O if O dominates S
C-List vs ACL: Accountability - CORRECT ANSWER: ACL is better: we just have to find all
the people that have permissions for an object by looking at a list
C-List vs ACL: Overhead of checking permission - CORRECT ANSWER: C-List is better--the
user simply has permissions which is more efficient than checking a list
C-List vs ACL: Revocation - CORRECT ANSWER: ACL is better: we just have to find the entry
in the ACL and delete/ modify it.
Call Gate - CORRECT ANSWER: When trying to access code from a higher privilege level.,
you can go through the call gate
Capability List - CORRECT ANSWER: Belongs to a user and is a list of all objects they have
permission for along with what permissions they have. This is like having a ticket to the movie
theater
Stored with the user
