Quiz on Hardware and Software Data Security

What does data security refer to?

• Preventing users from accessing data

• Deleting information in an unauthorized way

• Sharing information with unauthorized subjects

• Protection of information against possible violations

What is compromised when information is disclosed to unauthorized subjects?

• Availability

• Confidentiality

• Authentication

• Integrity

Which access control policy is based on the identity of the user requesting access?

• Mandatory Access Control

• Discretionary Access Control

• Role-based Access Control

• Inference controls

What is the main weakness of token-based authentication?

• Tokens can be forged, lost, or stolen

• Tokens are expensive to implement

• Tokens require user intervention for authentication

• Tokens have limited processing capabilities

What is the main advantage of biometric authentication over password-based techniques?

• Is less expensive to implement

• Requires less user training and awareness

• Is easier to remember for users

• Eliminates weaknesses due to identity proof acquisition

How can replay attacks be prevented?

• Sharing passwords with others

• Writing down passwords for easy access

• Using strong authentication methods

• Using weak encryption techniques

What is the purpose of a reference monitor in access control?

• Stores all user passwords securely

• Monitors the physical access to the system

• Intercepts every access request and determines if it should be granted or denied

• Encrypts all communication between users and the system

Which access control policy is based on the concept of users having different roles within an organization?

• Mandatory Access Control

• Inference controls

• Discretionary Access Control

• Role-based Access Control

What is the main advantage of separating policies from mechanisms in access control?

• Allows for independent discussion of access requirements

• Limits the comparison of different access control policies

• Increases the cost of implementing access control

• Reduces the precision of access control mechanisms

What property ensures that an access control model is free of contradictions?

• Tamper-proof

• Completeness

• Non-bypassable

• Consistency