Information Assurance and Security 2 Midterm Exam

What do you call the method by which systems determine whether and how to admit a user into trusted area of the organization?

(a)  

It is a fundamental concept in security that minimizes risk to the business or organization.

(a)  

It provides the ability to share resources in a peer-to-peer configuration that allows users to control and possibly provide access to information or resources at their disposal.

• Mandatory Access Control (MAC)

• Non-Discretionary Controls

• Discretionary Access Controls (DAC)

• None of the choices

It is a mechanism where unverified or unauthenticated entities who seek access to a resource provide a label by which they are known to the system.

• Identification

• Authentication

• Authorization

• Accountability

• None of the choices

What do you call the process of validation an unauthenticated entity's purported identity?

• Identification

• Authentication

• Authorization

• Accountability

• None of the choices

This type of control is associated with the duties a user performs in an organization, such as a position or temporary assignment.

• Mandatory access control

• Role-based access controls

• Task-based access controls

• Discretionary access controls

• None of the choices

It is a person who maintains the security of a system, perhaps by adding and removing access by user accounts

• Owner

• Custodian

• End user

• Subjects

• None of the choices

It prevents specific types of information from moving between two different levels of networks

(a)  

Traffic on a network is broken into smaller message units called (a)   .

It may be a separate computer system, a software service running on an existing router or server, or a separate network that contains several supporting devices.

(a)