What type of access control approaches is suitable when several people in the organization perform the same role or task?       Group of answer choicesMandatory access controlRole/task-based access controlDiscretionary access controlLattice-based access control

Access control is considered for which types of people?

Which of the following is applicable in the Role-Based Access Control (RBAC) model?Group of answer choicesA user can be assigned with several rolesA role can access several resourcesA role can be assigned to several usersAll of these

If different user groups with different security access levels need to access the same information, which of the following actions should management take?Group of answer choicesIncrease the security controls on the information.Decrease the classification label on the information.Require specific written approval each time an individual needs to access the informationDecrease the security level of the information to ensure accessibility and usability of the information.

In access control terminology, specific terms are being used to describe different roles. a. What are subjects? b. What are objects? c. What are resource owners? d. Who performs authorization and who is being authorized?

Which of the following access control methodologies can be described BEST as allowing a user the least access based on the jobs the user needs to perform?Scope-basedRole-basedLocation-basedRule-based