Full Sscp Official| 162 Questions| With Complete Solutions

Access Control Object correct answer: A passive entity that typically receives or contains some form of data. Access Control Subject correct answer: An active entity and can be any user, program, or process that requests permission to cause data to flow from an access control object to the access control subject or between access control objects. Asynchronous Password Token correct answer: A one-time password is generated without the use of a clock, either from a one-time pad or cryptographic algorithm. Authorization correct answer: Determines whether a user is permitted to access a particular resource. Connected Tokens correct answer: Must be physically connected to the computer to which the user is authenticating. Contactless Tokens correct answer: Form a logical connection to the client computer but do not require a physical connection. Disconnected Tokens correct answer: Have neither a physical nor logical connection to the client computer. Entitlement correct answer: A set of rules, defined by the resource owner, for managing access to a resource (asset, service, or entity) and for what purpose. Identity Management correct answer: The task of controlling information about users on computers. Proof of Identity correct answer: Verify people's identities before the enterprise issues them accounts and credentials. Kerberos correct answer: A popular network authentication protocol for indirect (third-party) authentication services. Lightweight Directory Access Protocol (LDAP) correct answer: A client/server-based directory query protocol loosely based on X.500,