Which of the following best expresses the primary goal when controlling access to assets?Group of answer choicesEnsure that only valid objects can authenticate on a system.Prevent unauthorized access to subjects.Ensure that all subjects are authenticated.Preserve confidentiality, integrity, and availability of systems and data.

Asset is a resource controlled by an entity.Group of answer choicesTrueFalse

Which of the following security design principles says ‘access decisions should be based on permission rather than exclusion’?Group of answer choicesFail-safe defaultsComplete mediationSeparation of privilegeLeast Astonishment

From an internal control standpoint, the asset most susceptible to improper diversion and use isGroup of answer choicesbuildings.prepaid insurance.cash.land.

Which of the following assures that individuals control or influence what information related to them may be collected and stored and by whom and to whom that information may be disclosed?Group of answer choicesPrivacyAvailabilitySystem IntegrityData Integrity

Which of the following access control approaches provides the ability to share resources or information in a peer-to-peer configuration?Group of answer choicesRole-basedDiscretionaryMandatoryNon-Discretionary