Access Control: Final Exam Review:

What is subject to an access control scenario?
Policies
Subject
Objects

What are the elements of a well-defined access control system?
Policies
Procedures
Tools

What is the purpose of access control?
To regulate interactions between a subject (usually, but not always, a human user) and an object, like a network, device, or data itself.

What components can be used to measure the confidence in any authentication system?
Thetype of correlation and the number of authentication factors in place.

What holds true while hardening an organizational network through security controls?
100percent of access control threats cannot be eliminated

What should be considered while implementing a layered access security approach?
Use of case studies to learn from what others have done and apply those lessons to your own situation (risk assessments)

Which attack strategies has the highest success rate of making a particular system vulnerable?
Denial of Service (DoS) attacks

What is the preferred method to reduce risks while managing access security controls within the system/application domain?
Checking and applying updates and new patches on a regular basis

True or False: When considering access control security options to mitigate vulnerabilities within the infrastructure, it is unnecessary to place access controls on each asset.
True

Defense-in-depth is the concept and strategy of implementing multiple?
Layers of security overlapping to protect against a single point of failure.

Ina data classification scheme, least privilege and need to know ensures that access to data and information is available to ___.
Not every staff member or person requesting access to records has the need, requirement, or authority to receive the information or records

Which act allows anyone to get