Match each item with a statement below.
-Implemented at the discretion of the data user.
A)authentication
B)least privilege
C)discretionary access controls
D)authorization
E)separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question

Quizplus · Accepted Answer

Discretionary access controls are implemented at the discretion of the data user.

Answer: B
 Least privilege is the principle that users should be given the minimum amount of access necessary to perform their job functions.

Answer: G
 Need to know is the principle that individuals should only be given access to information that is necessary for them to perform their job functions.

Answer: D
 Authorization is the process of granting or denying access to a system or resource.

Answer: E
 Separation of duties is the principle that multiple individuals should be involved in a process to prevent any one person from having too much control.

Answer: A
 Authentication is the process of verifying the identity of a user attempting to access a system or resource.

Answer: H
 Nondiscretionary access controls are implemented by system administrators and are generally not subject to change by individual users.

Answer: I
 Accountability is the principle that individuals should be held responsible for their actions and the consequences of those actions.

Answer: F
 Identification is the process of providing a unique identifier for each user of a system or resource.

Match Each Item with a Statement Below