Discretionary access control and mandatory access control, Risk Management

Assignment Help:

Question:

(a)

(i) Explain what is meant by Discretionary Access Control and Mandatory Access Control.

(ii) What is the difference between the two types of access control?

(iii) Which method would be the most effective to ensure that users do not share files with other users not approved for access?

(b) Outline the three differences between the Liberty Alliance specification and the Microsoft .NET Passport System.

(c) Which of the following options below would be the MOST effective solution for preventing individuals outside the organization from modifying sensitive information on a corporate database. Explain the reasons for choosing one option and for rejecting the other two options.

Option 1: Screened Subnets
Option 2 : System access logs
Option 3: Role based access controls

(d) (i) Where should the Intrusion Detection System be placed on a network?

(ii) Identify one main weakness of signature based Intrusion Detection Systems.

(iii) Explain what is the main objective of network mapping when conducting a penetration test?

(iv) When is the best time to perform a penetration test?


Related Discussions:- Discretionary access control and mandatory access control

Leverage, evaluate the importance of leverage in financial management of a...

evaluate the importance of leverage in financial management of a small company

Differentiate between speculation and arbitraging, Question: a) Using i...

Question: a) Using illustrative and numerical example, differentiate between speculation and arbitraging in the context of foreign exchange market. b) One year borrowing and

Risk and return, A person is willing to sell some stock at Rs 500000 after ...

A person is willing to sell some stock at Rs 500000 after one year from now. The risk free rate is 7% and the risk premium is estimated at 8%. I the person is intending to enter a

Explain effective incident management system, Question 1: (a) Explain w...

Question 1: (a) Explain what is meant by the term „incident handling? in the context of information security. (b) Describe the main features of an effective incident manag

Audit of home retail group , Critically assess the risk-based approach to e...

Critically assess the risk-based approach to external audit with particular reference to the audit of Home Retail Group plc. Note: You must give examples of how you might col

What is the straight value of the convertible bond, The current stock price...

The current stock price of IOU is $250 and has a standard deviation of 35% per year. The risk-free interest rate is 5% per year compounded continuously. Find the prices of a call a

Explain the steps to conduct a health risk assessment, Probelm 1: (a) D...

Probelm 1: (a) Describe the term Risk assessment and outline the provision of the Occupational Safety and Health Act 2005 with respect to risk assessment. (b) Risk Assessmen

What is material safety data sheet, Q. What is Material Safety Data Sheet ?...

Q. What is Material Safety Data Sheet ? 1. Material Safety Data Sheet is a formal document containing important information about the characteristics and actual or potential ha

Monetery value, What is the monetary certainty equivalent, Risk Management

What is the monetary certainty equivalent, Risk Management

Explain mechanisms of financial system for risk transferred, Explain about ...

Explain about the mechanisms of financial system for risk to be transferred. Financial systems also give mechanisms for risk to be transferred. For instance insurance contracts

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd