AP Comp Sci Review - Auth Processes

Front

What is access control?

Back

A method to manage permissions for resources

Answer explanation

Access control is primarily a method to manage permissions for resources, ensuring that only authorized users can access or modify them. This distinguishes it from network protocols, software methodologies, or encryption techniques.

Front

An access control list is:

Back

A list of permissions attached to an object

Answer explanation

An access control list (ACL) is specifically a list of permissions attached to an object, defining who can access or modify that object. This makes the first choice the correct answer.

Front

What is an access control policy?

Back

A set of rules that determine who is allowed to access or use resources.

Answer explanation

An access control policy is a set of rules that determine who is allowed to access or use resources, ensuring security and proper management of information.

Front

Authentication is the process of:

Back

Verifying the identity of a user or process

Answer explanation

Authentication is primarily about verifying the identity of a user or process, ensuring that the entity accessing a system is who they claim to be. This distinguishes it from encryption, backup, and data analysis.

Front

An authentication credential is:

Back

A piece of information used to verify identity

Answer explanation

An authentication credential is specifically a piece of information, such as a password or token, used to verify a person's identity. This distinguishes it from software, encryption methods, or network protocols.

Front

Mandatory access control is a security strategy that:

Back

Relies on a central authority to set access controls

Answer explanation

Mandatory access control relies on a central authority to enforce access policies, ensuring consistent security across the system. This contrasts with user-driven models where individuals set their own access controls.

Front

In the context of access control, what is an object?

Back

A resource or entity that is being accessed

Answer explanation

In access control, an 'object' refers to a resource or entity that is being accessed, such as files, databases, or devices. This distinguishes it from subjects (users) and policies that govern access.

Front

Permissions in access control refer to:

Back

The ability to read, write, or execute a resource

Answer explanation

Permissions in access control specifically refer to the ability to read, write, or execute a resource, determining what actions a user can perform on that resource.

Front

In the context of access control, what is a subject?

Back

A person or entity that can perform actions on resources.

Answer explanation

In access control, a subject refers to a person or entity that can perform actions on resources, distinguishing it from resources themselves or policies that govern access.

Front

What does 'Read access' allow a user to do?

Back

View the contents of a file or folder

Answer explanation

'Read access' allows a user to view the contents of a file or folder without making any changes. This means they can open and see the data, but cannot edit or delete it.