Database Security - Quiz 6

If an individual user can set an access control mechanism to allow or deny access to an object, that mechanism is a ________________.

• Content-based Access Control

• Mandatory Access Control Models (MAC)

• Discretionary Access Control Models (DAC)

• Role-Based Access Control (RBAC)

When a system mechanism controls access to an object and an individual user cannot alter that access, the control is a ________________.

• Content-based Access Control

• Mandatory Access Control Models (MAC)

• Discretionary Access Control Models (DAC)

• Role-Based Access Control (RBAC)

A security paradigm where users are granted access depending on their role in the organisation is called ________________.

• Content-based Access Control

• Mandatory Access Control Models (MAC)

• Discretionary Access Control Models (DAC)

• Role-Based Access Control (RBAC)

The main drawback of DAC is ________________.

• Trojan Horse

• Trapdoor

• Logic bomb

• Spyware

A state, i.e. an access matrix M, is said to ________________ the right r if there exists a command c that adds the right r into an entry in the access matrix that previously did not contain r.

• safe

• grant

• revoke

• leak

A state of a protection system, that is, its matrix M, is said to be ________________ with respect to the right r if no sequence of commands can transform M into a state that leaks r.

• leak

• safe

• unsafe

• exposed

In ________________, the subject is authorised to use a requested system resource indirectly because the objects in the system are referenced in terms of other objects.

• Negative authorisation

• Positive authorisation

• Implicit authorisation

• Explicit authorisation

In ________________, it explicitly stores all authorisations for all system objects whose access has been requested.

• Negative authorisation

• Positive authorisation

• Implicit authorisation

• Explicit authorisation

A computer program with an apparently or actually useful function that contains additional (hidden) functions that surreptitiously exploit the legitimate authorisations of the invoking process. ________________

• Trojan Horse

• Trapdoor

• Logic bomb

• Spyware

________________ conditions the access to a given object based on its content.

• Content-based Access Control

• Mandatory Access Control Models (MAC)

• Discretionary Access Control Models (DAC)

• Role-Based Access Control (RBAC)