Ch 8: Security Management Models
Question and answers verified to pass
2025/2026
Blueprint - correct answer ✔a framework or security model customized to an organization, including
implementation details
Framework / Security Model - correct answer ✔a specification of a model to be followed during the
design, selection, and initial and ongoing implementation of all subsequent security controls, including
infosec policies, security education and training programs, and technological controls
Least Priviledge - correct answer ✔The data access principle that ensures no unnecessary access to
data exists by regulating members so they can perform only the minimum data manipulation necessary
Need-to-know - correct answer ✔The principle of limiting users' access privileges to only the specific
information required to perform their assigned task
Separation of Duties - correct answer ✔The information security principle that requires significant tasks
to be split up so that more than one individual is required to complete them
Capabilities Table - correct answer ✔In a lattice-based access control, the row of attributes associated
with a particular subject, such as a user
Discretionary Access Controls - correct answer ✔Access controls that are implemented at the
discretion or option of the data user
Dumpster Diving - correct answer ✔An information attack that involves searching through a target
organization's trash and recycling bins for sensitive information
Question and answers verified to pass
2025/2026
Blueprint - correct answer ✔a framework or security model customized to an organization, including
implementation details
Framework / Security Model - correct answer ✔a specification of a model to be followed during the
design, selection, and initial and ongoing implementation of all subsequent security controls, including
infosec policies, security education and training programs, and technological controls
Least Priviledge - correct answer ✔The data access principle that ensures no unnecessary access to
data exists by regulating members so they can perform only the minimum data manipulation necessary
Need-to-know - correct answer ✔The principle of limiting users' access privileges to only the specific
information required to perform their assigned task
Separation of Duties - correct answer ✔The information security principle that requires significant tasks
to be split up so that more than one individual is required to complete them
Capabilities Table - correct answer ✔In a lattice-based access control, the row of attributes associated
with a particular subject, such as a user
Discretionary Access Controls - correct answer ✔Access controls that are implemented at the
discretion or option of the data user
Dumpster Diving - correct answer ✔An information attack that involves searching through a target
organization's trash and recycling bins for sensitive information
