Question 1 In regards to mandatory access control, a user with a secret security clearance is able to write a document which may later by classified as top secret. True False

Question 2 To a ssign and manage priileges by job function, you might use what? Non-discretionary access control Discretionary access control Role-based access control Mandatory access control

Question 3 The access control component that determines whether a subject can access an object is called a reference monitor. True False

Question 4 In regard to mandatory access control, in addition to a proper security clearance equal to or greater than an object's security label, what must a user have in addition in order to access the object? Need to know Least privelege Most privelege Separation of dutues

Question 5 When discussing priilege management, MAC stands for: Modified access credentials Mandatory availability criteria Media access control Mandatory access control

Question 6 There are security issues when a company allows users to have too many rights and permission. Allowing a user the absolute minimum rights necessary when accessing a network is referred to as what? Full disclosure Separation of dutues Least privelege Discretionary access control

Question 7 Security labels are used in what type of model? Mandatory access control Military access control model Discretionary access control model Role-based access control model

Question 8 An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects. True False

Question 9 The access control model in which object owners can change the persmissions of their own files is called: Mandatory Discretionary Rule-based Role-based

Question 10 A capability list contains information on the persmissions a user has across a number of resources (a row in the access control matrix). True False