Access Control

1. What is an access control model?

• A way to control access to physical spaces

• A framework that dictates how subjects access objects

• A list of rules for software updates

• A set of security protocols used in networking

Which access control method restricts access based on the user's role?

• Attribute-based access control (ABAC)

• Mandatory access control (MAC)

• Role-based access control (RBAC)

• Discretionary access control (DAC)

Which type of access control uses attributes like department or IP address to grant access?

• Role-based access control (RBAC)

• Discretionary access control (DAC)

• Attribute-based access control (ABAC)
  

• Mandatory access control (MAC)

In Mandatory Access Control (MAC), who determines the access permissions?

• The system administrator

• The owner of the resource

• The user

• The government

What is a key feature of Discretionary Access Control (DAC)?

• It is controlled by the operating system

• Access permissions are determined by the owner of the resource

• It is based on the role of the user

• It uses attributes like department or location to grant access

What distinguishes Role-based Access Control (RBAC) from Attribute-based Access Control (ABAC)?

• RBAC uses attributes to assign access, while ABAC uses roles

• RBAC assigns permissions based on the user’s role, while ABAC uses a combination of attributes

• RBAC allows the resource owner to decide who has access, ABAC is determined by the system

• RBAC is only used in small organizations, ABAC is for large organizations

What type of system access control gives each user a security clearance (e.g., top secret, secret)?

• Role-based access control (RBAC)

• Discretionary access control (DAC)

• Mandatory access control (MAC)

• Attribute-based access control (ABAC)

Which access control method is the easiest to implement but provides the least control?

• Role-based access control (RBAC)

• Discretionary access control (DAC)

• Mandatory access control (MAC)

• Attribute-based access control (ABAC)

What is the primary advantage of using Attribute-based Access Control (ABAC)?

• It allows fine-grained control based on various attributes

• It is the most cost-effective solution

• It is simpler to implement than RBAC

• It doesn’t require any system administrator

Which access control system relies heavily on user authentication and authorization through login credentials?

• Role-based access control (RBAC)

• Discretionary access control (DAC)

• Mandatory access control (MAC)

• Attribute-based access control (ABAC)