Access, Authentication, Authorization

Question 1

Physical Access Control Systems vs Logical Access Control Systems

Answer 1

Physical - Manage entry to physical locations using methods such as RFID keycards or biometric scanners
Logical - Manage digital access to networks using passwords or MFA to verify user identity

Question 2

Rule-Based Access Control

Answer 2

Used to manage user access to resources based on predefined rules and conditions

Question 3

Mandatory Access Control

Answer 3

Enforces strict access policies based on predefined security classifications; uses labels for both users and resources (user with secret label can access anything labeled secret or below)

Question 4

Discretionary Access Control

Answer 4

Allows resource owners full control of resource access, enabling them to grant or deny anyone access to their resources

Question 5

Attribute-Based Access Control

Answer 5

Uses the attributes of users, resources, and the environment to determine access permissions dynamically