Download IT fundamentals chapter 31 and more Exercises Computer Science in PDF only on Docsity!
IT Fundamentals - Chapter 31
5.0 (1 review)
Students also studied
Science Computer Science Computer Security and Reliability
Save Groups
Flashcard sets Study guides
security plus section 12 (MONITORI... 21 terms
derra_Hewlett (^) Preview
AWS CLOUD PRACTICTIONER CLF-...
149 terms
jessiepitre2911 (^) Preview
Cyber operations 27 terms
jjperez187 (^) Preview
7.1.8 Pra 10 terms
em
Practice questions for this set
Learn 1 / 7 Study with Learn
A security discipline that requires that users and groups be given no more
rights and permissions than necessary to perform their jobs.
Choose an answer
(^1) Authentication 2 Principle of least privilege
(^3) Mandatory access controls (MAC) 4 Non-repudiation
Don't know?
Terms in this set (16) Hide definitions
Authentication The process by which a device or user proves identity. For example, when a user logs in to a computer, network, or email service, the user must provide evidence to prove their identity.
Authentication, authorization, accounting, and nonrepudiation
Four key concepts in IT security. This chapter compares and contrasts these four processes.
Authorization The process that verifies that a particular user or group is allowed to access a resource and what types of access permissions they are qualified to receive.
Accounting The process for recording users' access to resources. Three common methods include log files, tracking, and web browser history.
Non-repudiation The process of proving that a user performed an action or was present in a location at a specific time, using methods including video recording, biometric data, signatures, and receipts.
Role-based access control (RBAC) A control system in which access decisions are based on the roles of individual users as part of an organization
Mandatory access controls (MAC) A strictly top-down method of managing access. Users have no options to make changes in how a resource can be accessed.
Discretionary access control (DAC) The least restrictive access control model in which each user is the owner of their objects and has control over granting read, write and modify permissions to others.
Logs (log files) Records of events, activities and errors that take place during device or network usage.
