SSCP Certification SSCP Access Control Systems 5

Question 1

What is the difference between identification and authentication in access control?

Accepted Answer

Identification claims identity; authentication verifies the claim

Answer

Identification is the act of claiming an identity (e.g., username), while authentication is the process of proving that claim with evidence.

Question 2

Which access control model is most commonly used in commercial operating systems like Windows and Linux file systems?

Accepted Answer

Discretionary Access Control (DAC)

Answer

DAC allows resource owners to control who can access their files, which is the standard model in mainstream operating systems via file permissions and ACLs.

Question 3

A biometric system that is tuned to minimize False Acceptance Rate (FAR) will likely experience:

Accepted Answer

Increased False Rejection Rate (FRR)

Answer

FAR and FRR have an inverse relationship; tightening the threshold to reduce FAR will cause more legitimate users to be rejected, increasing FRR.

Question 4

What does the term 'object' refer to in the context of access control?

Accepted Answer

A passive resource such as a file, database, or device being accessed

Answer

In access control terminology, an object is a passive entity (file, database record, printer) that a subject attempts to access.

Question 5

Which access control implementation enforces permissions at the operating system kernel level, making it resistant to application-level tampering?

Accepted Answer

Reference Monitor

Answer

The Reference Monitor is a kernel-level concept that mediates all access requests between subjects and objects, and cannot be bypassed by user-space processes.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Access Control Systems 5