Access Tools and Controls

Question 1

What is the difference between DAC, MAC, and RBAC?

Answer 1

DAC: user-defined, MAC: policy-defined, RBAC: role-based

Question 2

How do biometrics and tokens help in authentication?

Answer 2

Biometrics = fingerprint, iris; Tokens = smartcards, USBs

Question 3

What type of access control relies on user roles rather than identities?

Answer 3

Role-Based Access Control (RBAC)

Question 4

What’s the difference between DAC and MAC?

Answer 4

DAC allows users to set permissions; MAC uses central policies to enforce access.

Question 5

Why would you use attribute-based access control (ABAC)?

Answer 5

To make access decisions based on user, resource, and environment attributes

Question 6

What protocol enables secure SSO between a cloud app and an on-premises identity system?

Answer 6

SAML