Chapter 4: Access Control Principles Quiz

Access Control Fundamentals

• The central element of computer security is access control, which ensures that resources are protected from unauthorized access, use, disclosure, modification, or destruction.

Access Control Principles

• Mandatory Access Control (MAC) is based on comparing security labels with security clearances to regulate access.

Role-Based Access Control (RBAC)

• The main feature of RBAC is that access is granted based on a user's role within an organization, rather than their individual identity.

Attribute-Based Access Control (ABAC)

• ABAC relies on a user's attributes, such as job function, department, or security clearance level, to regulate access.

Access Control Requirements

• Authentication is an essential requirement for access control, as it verifies the identity of users and ensures they are who they claim to be.

UNIX File Access Control

• The 'sticky bit' in UNIX file access control is used to prevent deletion of files in a public directory.

Access Control Models

• The Harrison-Ruzzo-Ullman (HRU) model extends the universe of objects to include processes, devices, and memory locations.

UNIX File Concepts

• An inode is a data structure in UNIX that stores metadata about a file, such as its ownership, permissions, and location on disk.

Separation of Duty

• The primary purpose of Separation of Duty in access control is to prevent any single individual from performing a critical task, reducing the risk of fraud or abuse.

Access Matrix Data Structure

• The main function of an access matrix is to define the access rights of subjects (users, processes) to objects (files, resources) in a system.