Discretionary access control and mandatory access control, Risk Management

Assignment Help:

Question:

(a)

(i) Explain what is meant by Discretionary Access Control and Mandatory Access Control.

(ii) What is the difference between the two types of access control?

(iii) Which method would be the most effective to ensure that users do not share files with other users not approved for access?

(b) Outline the three differences between the Liberty Alliance specification and the Microsoft .NET Passport System.

(c) Which of the following options below would be the MOST effective solution for preventing individuals outside the organization from modifying sensitive information on a corporate database. Explain the reasons for choosing one option and for rejecting the other two options.

Option 1: Screened Subnets
Option 2 : System access logs
Option 3: Role based access controls

(d) (i) Where should the Intrusion Detection System be placed on a network?

(ii) Identify one main weakness of signature based Intrusion Detection Systems.

(iii) Explain what is the main objective of network mapping when conducting a penetration test?

(iv) When is the best time to perform a penetration test?


Related Discussions:- Discretionary access control and mandatory access control

What is risk management, What is Risk management Risk  management  is  ...

What is Risk management Risk  management  is  to  recognise  the  risks  to  which  company  is  exposed  to,  consider  the trade-off between risks and expected returns, and c

Determine about the bull-bear market risk, Bull-Bear Market Risk Thi...

Bull-Bear Market Risk This risk arises from the variability in the market returns resulting from alternating bull and bear market forces. Ø when security index rises fair

binomial option pricing model , Question 1 Zero coupon yields (all yie...

Question 1 Zero coupon yields (all yields are continuously compounded) are 3.00% for three months, 3.50% for six months, 3.60% for nine months and 3.80% for twelve months. Nort

Decisions in sales promotion, the importance of determining the policy on y...

the importance of determining the policy on your image?

Determine a process for communicating, Determine a process for communicatin...

Determine a process for communicating, resourcing and managing risk management strategies Establish a communication plan to implement the risk management framework that has been

Risk and return, A person is willing to sell some stock at Rs 500000 after ...

A person is willing to sell some stock at Rs 500000 after one year from now. The risk free rate is 7% and the risk premium is estimated at 8%. I the person is intending to enter a

Execution of a risk analysis, Question: (a) What are the various option...

Question: (a) What are the various options to mitigate risks in an Information Security Management System (ISMS)? For each option specify an instance where it can be used.

Develop strategies to eliminate risk, Develop strategies to eliminate, miti...

Develop strategies to eliminate, mitigate, deflect or accept risk • Risk treatment strategies: Risk avoidance, reduction, transfer and retention • The types of controls that can

Trade Finance and Risk, The risks in the transaction seem to be very broad ...

The risks in the transaction seem to be very broad and encompassing. Can Engineering Tech effectively protect its interests and assure payment?

Write Your Message!

Captcha
Free Assignment Quote

Assured A++ Grade

Get guaranteed satisfaction & time on delivery in every assignment order you paid with us! We ensure premium quality solution document along with free turntin report!

All rights reserved! Copyrights ©2019-2020 ExpertsMind IT Educational Pvt Ltd