Match each item with a statement below.
-Obtaining the identity of the entity requesting access to a logical or physical area.
A)authentication
B)least privilege
C)discretionary access controls
D)authorization
E)separation of duties
F)identification
G)need to know
H)nondiscretionary access controls
I)accountability

Question

Quizplus · Accepted Answer

Identification refers to the process of verifying the claimed identity of a user, device, or system.

Answer: A 
 Authentication is the process of verifying that the claimed identity of a user, device, or system is valid.

Answer: D 
 Authorization is the process of determining what actions or resources a user, device, or system is allowed to access based on their authenticated identity.

Answer: G 
 Need to know refers to the principle that access to sensitive information or resources should be restricted to only those who require it to perform their job responsibilities.

Answer: I 
 Accountability refers to the ability to trace and audit the actions of a user, device, or system to determine who is responsible for any performed actions.

Answer: B 
 Least privilege refers to the principle of providing only the minimum level of access necessary for a user, device, or system to perform their job responsibilities.

Answer: C 
 Discretionary access controls are permissions that are granted at the discretion of the data owner, allowing them to control the access of other users to their resources.

Answer: H 
 Nondiscretionary access controls are access controls that are assigned by an administrator or security policy, rather than at the discretion of the data owner.

Match Each Item with a Statement Below