Determine the access control model where users are assigned access rights based on their function within the organization? O a) This is a feature of Discretionary Access Control (DAC). O b) This is a feature of Rule Based Access Control (RBAC). c) This is a feature of Mandatory Access Control (MAC). d) This is a feature of Role Based Access Control (RBAC).

Discretionary Access Control is often implemented in government organizations, where access to a given resource is largely dictated by the sensitivity label applied to it.  True  False

Quèstion 29 The Bell-LaPadula model implements a combination of O rule-based and role-based access controls with the primary concern on the confidentiality of the resource in question. --- discretionary and mandatory access controls mandatory and rule-based access controls discretionary and rule-based access controls

Which kind of access control ensures that a user has just the data they need to do their task?

This Access Control Principle states that no single individual should have so many privileges that the individual is able to complete important technical or business functions on his or her own.Choose the correct answer?    Separation of Duties   Multi-partite Employee Controls   Least Privilege   Bio-metric Validation

Discussion: NTFS permissions provide access control for files and folders. Research and discuss NTFS special permissions and their added granularity in terms of access control. Demonstrate how permission would be propagated in the scenario bellow Assuming that you are the System Administrator for CIS-215 where students and faculties uses a share called CIS-215. There is has a student folder and faculty folder. Inside the student folder you have assignment folder. All students can view and copy the assignments. There is also a folder called grades. Students have view access to the own grades. Faculty have full access to the grade folder. that has students with a scenario that might require the use of NTFS special permissions. Ineed to set up a shared folder that will act as a secure drop box of sorts that will allow students to upload their video file but not view, edit, or delete anyone else's video exam files. The files would be too big to e-mail and the current solution is going to…

Which kind of access control ensures that each user has just the data they need to do their tasks?

Complete the attached table with the principles below relating to server security The principles are: Economy of mechanism Fail-safe defaults Complete mediation Open design Separation of privilege Least privilege Least common mechanism Psychological acceptability

What is the difference between public, private and protected access modifiers?

From the extended use case diagram, make the activity diagram of the same.