Information Security Quiz

Which of the following ensures that only authorized parties can access a resource?

• Authentication

• Access control

• Accountability

• Encryption

Which of the following is a practical requirement of information protection?

• Encryption

• Authentication

• Data backup

• Network monitoring

What is the purpose of the Access Control step in securing a computer system?

• To identify the subject

• To authenticate the subject

• To authorize access to system resources

• To record transaction access

Which step is responsible for determining which subject requests access to a system resource?

• Identification

• Authentication

• Access Control

• Accountability

What is the main goal of the Identification step in securing a computer system?

• To verify the subject's identity

• To authorize access to resources

• To determine which subject requests access

• To record transaction access

What does Mandatory Access Control (MAC) restrict?

• Access based on user roles

• Access based on security labels

• Access based on user preferences

• Access based on time of day

What is a characteristic of MAC?

• Flexibility

• Restriction based on security labels

• Propagation of access rights

• Role emulation

In which systems is DAC widely implemented?

• Only in Linux systems

• Only in Windows systems

• In most operating systems

• Only in MacOS systems

What does DAC not control effectively?

• User authentication

• Information flow

• Data encryption

• Network speed

What is the primary focus of DAC?

• Data encryption

• User access control

• Network configuration

• Software development