Exam 12: Access Management

What process periodically validates a user's account,access control,and membership role or inclusion in a specific group?

Authorization is granting permission for admittance.

Rule-Based Access Control can be changed by users.

Which of the following is a simpler subset of Directory Access Protocol?

A user or a process functioning on behalf of the user that attempts to access an object is known as the:

Least privilege in access control means that only the minimum amount of privileges necessary to perform a job or function should be allocated.

Select the authentication system developed by the Massachusetts Institute of Technology (MIT)to verify the identity of network users.

ACLs provide file system security for protecting files managed by the user.

Describe how Kerberos works.

User accounts that remain active after an employee has left an organization are referred to as being what type of accounts?

To assist with controlling orphaned and dormant accounts,what can be used to indicate when an account is no longer active?

What framework is used for transporting authentication protocols instead of the authentication protocol itself?

Attribute-Based Access Control (ABAC)grants permissions by matching object labels with subject labels based on their respective levels.

During RADIUS authentication,what type of packet includes information such as identification of a specific AP that is sending the packet and the username and password?

Select the XML standard that allows secure web domains to exchange user authentication and authorization data and is used extensively for online e-commerce transactions.

Employee onboarding refers to the tasks associated with hiring a new employee.

What authentication service was developed by Cisco and is an authentication service commonly used on UNIX devices that communicate by forwarding user authentication information to a centralized server?

Describe the Bell-LaPadula model.

Which access control model can dynamically assign roles to subjects based on a set of defined rules?

What access control model below is considered to be the most restrictive access control model,and involves assigning access controls to users strictly according to the custodian?