Cissp Prep - Access Control

Front 1

Which security model incorporates the "no write up" and "no read down" rules?

Back 1

Bipa - The Biba model focuses on protecting the integrity of the data rather than confidentiality

Front 2

Which are the three common methods used in password cracking?

Back 2

Dictionary, hybrid, and brute force -

Front 3

Which of the following refers to an error where the percent of unenrolled or impostors are accepted as authentic?

Back 3

A Type II error - often called a false accept rate, occurs when an unauthorized person is given access to the system.

Front 4

Which password cracking technique will eventually figure out a hard-to-guess password?

Back 4

Brute Force - A brute force attack will try every possible combination of letters and characters that can form a password.

Front 5

When talking about biometric access controls, what is a
Type I error?

Back 5

False reject rate - Is exemplified by a legitimate user of the system being denied access.

Front 6

Which of the following critical areas of security represents the
unauthorized modification of information?

Back 6

Integrity

Front 7

Applying which principle represents one of the best ways to thwart internal
attacks using access control systems?

Back 7

Least Privelage

Front 8

What is the MOST influential factor in determining if a biometric solution
is feasible for a system?

Back 8

Budget

Front 9

Which authentication protocol is the strongest?

Back 9

Kerberos

Front 10

Which Security Model is designed for non-governmental
(commercial) use?

Back 10

The Clark-Wilson Model has been adapted for commercial use

Front 11

What is among the primary design types used for access
control systems today?

Back 11

Mandatory, discretionary, and role-based

Front 12

Name a vulnerability that is not a threat to hardware?

Back 12

A maintenance hook is a huge threat that exists in operations environments, but it threatens the software, not the hardware.

Front 13

Is it possible for the administrator of a UNIX system to quickly tell you what your password is currently set to?

Back 13

No - The password is stored in a hash

Front 14

The assurance of access to data when it is needed is one of the three key
principles in information security. What is this principle called?

Back 14

Availability

Front 15

Of the four ways a user can be authenticated, which presents the use of physical human attributes in the process?

Back 15

Biometrics - Something you are.

Front 16

Which control type is used to provide alternatives to
other controls?

Back 16

Compensating

Front 17

What is the association of a unique identity with an individual presenting himself unknowingly or knowingly to an access control system?

Back 17

Identification

Front 18

Which concept relates most closely to the Principle of Least Privilege?

Back 18

Separation of duties

Front 19

What attribute of the Kerberos authentication process makes it so
strong?

Back 19

Users and services (also called principals) authenticate to each other

Front 20

What principle is represented by an accountant creating a company's books and an auditor reviewing the books for accuracy?

Back 20

Separation of duties