Q$1.$ What are the three types of user authentication? What is challenge$-$response authentication and how does it work?

Q$2.$ What is copy$-$on$-$write and how does it work?

Q$3.$ What is role$-$based access control? How does it differ from mandatory access control?

Q$4.$ Describe an access matrix. What is a protection domain? What does the superscript c mean in an access matrix? What does the o mean? What is an access list? What is a capability list?

Q$5.$ Name and describe the three main goals of cryptography. What is secret key, or symmetric, cryptography? How does it differ from public$-$key $($or asymmetric$)$ cryptography?

Q$6.$ If Bob and Alice are using public key cryptography, and Bob wants to send Alice a secret $($encrypted$)$ message, which key would he use $($his public, his private, Alice$$s public, or Alice$$s private$)?$ If he wants Alice to be able to verify that he is the one that sent the message, which of the four keys would he use? What is a digital signature and how is it created?

Q$7.$ What is the difference between a threat, a vulnerability, and an attack? Name and describe five cybersecurity vulnerabilities. Name and describe five cybersecurity attacks.

Q$8.$ Name and describe the four levels of security measures. What is an attack surface? What is social engineering? What is phishing?

Q$9.$ What is the difference between a mechanism and a policy? Give examples of each.

Q$10.$ Describe the principle of least privilege. What is compartmentalization? Describe defense in depth. What is a protection domain?