Module 5 Unit 3 Using Access Controls Worksheet 1

Which is NOT an objective for Module 5 Unit 3?

• Identify different authentication factors and understand their use in providing strong authentication.
• Explain how encryption technologies are used for authentication and access control.
• Distinguish between identification, authentication, authorization, and accounting in access control systems.
• List worst practices when choosing passwords.
• List best practices when choosing passwords.

An access control system is the set of technical ________________ that govern how subjects may interact with objects.

• controls
• problems
• rules
• substances

__________________ are users or software processes or anything else that can request and be granted access to a resource while ________________ are the resources like networks, servers, databases, files, and so on.

• Accesses, subjects
• Objects, subjects
• Subjects, objects
• Accesses, objects

____________________ is a list of subjects and the rights or permissions they have been granted on the object.

• Access Control List
• Access Computer List
• Authorize Control List
• Authorize Computer List

___________ - Tracking authorized and unauthorized usage of a resource or use of rights by a subject.

• Accounting

• Authentication

• Identification

• Authorization

___________ - Proving that a subject is who or what it claims to be when it attempts to access the resource.

• Accounting

• Authentication

• Identification

• Authorization

___________ - Creating an account or ID that identifies the user or process on the computer system.

• Accounting

• Authentication

• Identification

• Authorization

___________ - Determining what rights or permissions subjects should have on each resource and enforcing those rights.

• Accounting

• Authentication

• Identification

• Authorization

True or false? The more privileges and permissions that you allocate to more users, the more you decrease the risk that a privilege will be misused.

• True
• False

What does least privilege mean?

• A user should be granted rights necessary to perform their job and many more.
• A user should be granted the minimum rights to perform their job.
• A user should be granted the maximum rights to perform their job.
• A user should be granted rights necessary to perform their job and no more.