Access Control - ANSWER The ability to permit or deny the privileges that users have
when accessing resources on a network or computer.
What are the three entities of access control? - ANSWER Objects, subjects and system.
Access Control Object - ANSWER Data, applications, systems, networks and physical
space.
Access Control Subjects - ANSWER Users, applications or processes that need access
to an object.
Access Control System - ANSWER The access control system includes the policies,
procedures, and technologies, that're implemented to control a subject's access to an
object.
Access Control Identification - ANSWER Identifies the subject. Examples include a
username or a user ID number.
Access Control Authentication - ANSWER The process of validating a subject's identity.
It includes the identification process, the user providing input to prove identity, and the
system accepting that input as valid.
Access Control Authorization - ANSWER The granting or denying a subject's access to
an object based on the level of permissions or the actions allowed on the object.
1
,Access Control Auditing (or Access Control Accounting) - ANSWER Maintaining a
record of a subject's activity within the information system.
The AAA of Access Control - ANSWER Authentication. authorization and auditing.
Access Control Policy - ANSWER Defines the steps & measures that are taken to
control access to objects by subjects.
Preventive Access Control - ANSWER Deter intrusion or attacks.
Detective Access Control - ANSWER Search for details about the attack or the attacker
Corrective Access Control - ANSWER Implement short-term repairs to restore basic
functionality following an attack
Deterrent Access Control - ANSWER Discourage continued or escalations of attacks
during an attack
Recovery Access Control - ANSWER Restore the system to normal operations after the
attack and short-term stabilization period.
Compensative Access Control - ANSWER Alternatives to primary access controls
Administrive Access Control - ANSWER Policies that describe accepted practices.
Technical Access Control - ANSWER Computer Mechanisms that restrict access.
Physical Access Control - ANSWER Restricts physical access
2
, Directory Service - ANSWER Example of a technical access control system that you use
to manage and enforce access control policies.
Mandatory Access Control (MAC) - ANSWER MAC uses labels or attributes for both
subjects and objects. Any operation by any subject on any object will be tested against a set
of authorization rules to determine if the operation is allowed.
MAC Classification Labels - ANSWER Assigned to objects by the owner
MAC Clearance Labels - ANSWER Assigned to subjects
Flat File Database - ANSWER Unstructured, local user accounts.
Hierarchical Database - ANSWER Allows you to sort and organize your user accounts
by location, function and department. Allows you to replicate it.
What are three advantages of Hierarchical Databases? - ANSWER Organization,
delegation of administrator responsibilities, and replication.
Active Directory - ANSWER A directory service that uses a hierarchical database to
store user accounts.
Category 1 Active Directory Objects - ANSWER Resources. (They can represent
network resources, like printers.)
Category 2 Active Directory Objects - ANSWER Security Principals, including users,
computers and groups.
3
when accessing resources on a network or computer.
What are the three entities of access control? - ANSWER Objects, subjects and system.
Access Control Object - ANSWER Data, applications, systems, networks and physical
space.
Access Control Subjects - ANSWER Users, applications or processes that need access
to an object.
Access Control System - ANSWER The access control system includes the policies,
procedures, and technologies, that're implemented to control a subject's access to an
object.
Access Control Identification - ANSWER Identifies the subject. Examples include a
username or a user ID number.
Access Control Authentication - ANSWER The process of validating a subject's identity.
It includes the identification process, the user providing input to prove identity, and the
system accepting that input as valid.
Access Control Authorization - ANSWER The granting or denying a subject's access to
an object based on the level of permissions or the actions allowed on the object.
1
,Access Control Auditing (or Access Control Accounting) - ANSWER Maintaining a
record of a subject's activity within the information system.
The AAA of Access Control - ANSWER Authentication. authorization and auditing.
Access Control Policy - ANSWER Defines the steps & measures that are taken to
control access to objects by subjects.
Preventive Access Control - ANSWER Deter intrusion or attacks.
Detective Access Control - ANSWER Search for details about the attack or the attacker
Corrective Access Control - ANSWER Implement short-term repairs to restore basic
functionality following an attack
Deterrent Access Control - ANSWER Discourage continued or escalations of attacks
during an attack
Recovery Access Control - ANSWER Restore the system to normal operations after the
attack and short-term stabilization period.
Compensative Access Control - ANSWER Alternatives to primary access controls
Administrive Access Control - ANSWER Policies that describe accepted practices.
Technical Access Control - ANSWER Computer Mechanisms that restrict access.
Physical Access Control - ANSWER Restricts physical access
2
, Directory Service - ANSWER Example of a technical access control system that you use
to manage and enforce access control policies.
Mandatory Access Control (MAC) - ANSWER MAC uses labels or attributes for both
subjects and objects. Any operation by any subject on any object will be tested against a set
of authorization rules to determine if the operation is allowed.
MAC Classification Labels - ANSWER Assigned to objects by the owner
MAC Clearance Labels - ANSWER Assigned to subjects
Flat File Database - ANSWER Unstructured, local user accounts.
Hierarchical Database - ANSWER Allows you to sort and organize your user accounts
by location, function and department. Allows you to replicate it.
What are three advantages of Hierarchical Databases? - ANSWER Organization,
delegation of administrator responsibilities, and replication.
Active Directory - ANSWER A directory service that uses a hierarchical database to
store user accounts.
Category 1 Active Directory Objects - ANSWER Resources. (They can represent
network resources, like printers.)
Category 2 Active Directory Objects - ANSWER Security Principals, including users,
computers and groups.
3
