Information Assurance and Security 2 Midterm Exam

What do you call the method by which systems determine whether and how to admit a user into trusted area of the organization?

It is a fundamental concept in security that minimizes risk to the business or organization.

It provides the ability to share resources in a peer-to-peer configuration that allows users to control and possibly provide access to information or resources at their disposal.

• Mandatory Access Control (MAC)

• Non-Discretionary Controls

• Discretionary Access Controls (DAC)

• None of the choices

It is a mechanism where unverified or unauthenticated entities who seek access to a resource provide a label by which they are known to the system.

• Identification

• Authentication

• Authorization

• Accountability

• None of the choices

What do you call the process of validation an unauthenticated entity's purported identity?

• Identification

• Authentication

• Authorization

• Accountability

• None of the choices

This type of control is associated with the duties a user performs in an organization, such as a position or temporary assignment.

• Mandatory access control

• Role-based access controls

• Task-based access controls

• Discretionary access controls

• None of the choices

It is a person who maintains the security of a system, perhaps by adding and removing access by user accounts

• Owner

• Custodian

• End user

• Subjects

• None of the choices

It prevents specific types of information from moving between two different levels of networks

Traffic on a network is broken into smaller message units called _________.

It may be a separate computer system, a software service running on an existing router or server, or a separate network that contains several supporting devices.