SSCP Practice Test practice questions, page 26 of 43, with answer review and explanations.
Question 126
What can be defined as a table of subjects and objects indicating what actions individual subjects can take upon individual objects?
A capacity table
An access control list
An access control matrix
A capability table
Question 127
Which access control model is best suited in an environment where a high security level is required and where it is desired that only the administrator grants access control?
DAC
MAC
Access control matrix
TACACS
Question 128
Which access control model provides upper and lower bounds of access capabilities for a subject?
Role-based access control
Lattice-based access control
Biba access control
Content-dependent access control
Question 129
How are memory cards and smart cards different?
Memory cards normally hold more memory than smart cards
Smart cards provide a two-factor authentication whereas memory cards don't
Memory cards have no processing power
Only smart cards can be used for ATM cards
Question 130
Why do buffer overflows happen? What is the main cause?
Because buffers can only hold so much data
Because of improper parameter checking within the application