IAS Access Control Strategies

Which of the following is an example of security control?

• 
  Web browser

• Network cable

• 
  Firewall

• Computer mouse

What is the definition of an object in the context of access controls?

• A device with onboard firmware

• Anything that initiates a request for service

• Something that contains its own access control logic

• An entity that responds to a request for service

Derrick logs on to a system to read a file. 

 

In this example, Derrick is the ______.

• Process

• Object

• Predicate

• Subject

Which of the following is a subject?

• User

• Fence

• Filename

• File

What is the strategy that integrates people, technology, and operations capabilities to establish variable barriers across multiple layers and missions of an organization?

• Multi-Factor Authentication

• Single Point of Failure

• Cyberattack Prevention

• Layered Defense

In what type of environment does role-based access control work well?

• Single personnel with unique access requirements

• High-staff turnover and similar access requirements

• Limited access requirements for all personnel

• Low-staff turnover

Which of the following is an example of a logical access control method?

• Security guards

• Biometrics on a smartphone

• Cameras

• Turnstiles

Limiting access to data on the network would be considered which of the following controls?

• Administrative controls

• Logical or technical controls

• Virtualization controls

• Physical controls

What would be considered an administrative control in the context of seat belt usage?

• Passing a law requiring seat belt use

• Using the seat belt

• Building a car with seat belts

• Attaching the seat belt to the car

What alternative control could be used if biometric locks on multiple doors are not necessary and access does not need to be audited?

• Removing doors and securing the area permanently

• Implementing biometric scanners on all doors

• Installing a permanent wall

• Replacing doors with deadbolt locks