Access Control Flashcards
6 cards from real Security Services practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Access Control flashcards as text
What is an 'access control list' (ACL)?
Answer: A register that specifies who is permitted or denied access to specific resources
An ACL is a table of rules that specifies which users or systems are granted or denied access to particular resources or areas.
What is 'credential management' in access control?
Answer: The process of issuing, tracking, and revoking access credentials
Credential management involves the complete lifecycle of access credentials including issuance, tracking, updating, and revoking when no longer needed.
What should be done with an access card when an employee is terminated?
Answer: Immediately deactivate or revoke the access card
Access credentials must be immediately revoked upon employee termination to prevent unauthorized access to the facility.
What is 'multi-factor authentication' (MFA)?
Answer: Verifying identity using two or more different types of authentication factors
MFA requires two or more verification factors from different categories to significantly increase security beyond a single password.
What is the purpose of an audit trail in access control systems?
Answer: To record a log of all access events for accountability and investigation
An audit trail records all access events including who accessed what, when, and from where, enabling accountability and forensic investigation.
What does 'segregation of duties' mean in access control?
Answer: Dividing tasks so no single person has complete control over a critical process
Segregation of duties divides critical tasks among multiple people to prevent fraud, errors, and unauthorized activities by any single individual.