Network Security Topic 3

What is the primary goal of access control?

• To reduce hardware costs

• To enhance user experience

• To control who has access to information

• To increase network speed

In the context of access control, what does 'subject' refer to?

• An active entity like a user or process

• A passive entity like a file

• A security vulnerability

• A type of access control model

What is an Access Control List (ACL) used for?

• To specify access permissions for subjects

• To encrypt data

• To monitor network traffic

• To create user accounts

Which access control model requires formal matching of authorizations to object sensitivity?

• Role-Based Access Control (RBAC)

• Non-Discretionary Access Control (NDAC)

• Mandatory Access Control (MAC)

• Discretionary Access Control (DAC)

What is a key disadvantage of Discretionary Access Control (DAC)?

• It is difficult to implement

• It can lead to inadvertent changes

• It requires custom operating systems

• It does not allow for auditing

What does Role-Based Access Control (RBAC) primarily focus on?

• User's personal preferences

• User's role in the organization

• User's geographical location

• User's historical access patterns

Which of the following is an example of a technical control?

• Security awareness training

• Background checks

• Encryption

• Policy creation

What does the term 'authentication' refer to in network security?

• The process of identifying a user

• The process of granting access rights

• The process of verifying a user's identity

• The process of logging user activities

Which of the following is a characteristic of Mandatory Access Control (MAC)?

• Users can change their access permissions

• Access is based on user roles

• Access is determined by object sensitivity

• It is easy to implement

Which authentication method sends a username and password in clear text?

• CHAP

• PAP

• RADIUS

• TACACS+