CMIT 425 Wk5
Hansbke17
cmit425_week_5_essay_questions.docxWEEK 5 ESSAY QUESTIONS
Instructions: Answer all questions in a single document. Then submit to the appropriate assignment folder. Each response to a single essay question should be about a half-page in length (about 150 words).
1. Access controls are security features that are usually considered the first line of defense in asset protection. They are used to dictate how subjects access objects, and their main goal is to protect the objects from unauthorized access. Access control models are frameworks that use access controls to enforce the rules and objectives of the model. In your essay response, compare the different Access Control Models and give an example of one that you have used in a work situation or if that is not possible, one that you’ve read about in a scholarly article.
2. Relying on a password to secure access to a system does not provide enough security in today’s complex world. The Office of Personnel Management learned this the hard way in 2015. Since OPM was hacked and it was learned that the attackers compromised their system administrator accounts that were protected only with passwords, the Federal government has required the use of multifactor authentication for privileged accounts. Describe the three factors that can be used in authentication and give at least two examples for each.
3. There are two main methods of access control administration that an organization can choose between to achieve the level of protection that they need to secure their assets and information: centralized and decentralized. Describe the RADIUS, TACACS, and DIAMETER forms of centralized access control administration. What are the advantages and disadvantages of decentralized administration.
|
|
|
|
|
|
|
|
|
|
|
|
Criteria |
Outstanding 100 points |
Very Good 90 points |
Above Average 80 points |
Average 70 points |
Below Average 50 points |
Poor 30 points |
No Response 0 points |
|
Question 1 |
Student answered the question fully and provided extensive details and explanations to support the answer. |
Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics. |
Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics. |
Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics. |
Student provided insufficient answer or provided insufficient details and explanations to support the answer. |
Student provided incorrect answer and didn’t provide any supporting details and explanations. |
Student did not respond to question. |
|
Question 2 |
Student answered the question fully and provided extensive details and explanations to support the answer. |
Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics. |
Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics. |
Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics. |
Student provided insufficient answer or provided insufficient details and explanations to support the answer. |
Student provided incorrect answer and didn’t provide any supporting details and explanations. |
Student did not respond to question. |
|
Question 3 |
Student answered the question fully and provided extensive details and explanations to support the answer. |
Student answered the question fully and provided details and explanations to support the answer but missed some very minor points/topics. |
Student answered the question fully and provided details and explanations to support the answer but missed several minor points/topics. |
Student provided basic answer and/or provided some details and explanations to support the answer but missed major points/topics |
Student provided insufficient answer or provided insufficient details and explanations to support the answer. |
Student provided incorrect answer and didn’t provide any supporting details and explanations. |
Student did not respond to question. |
|
Overall Score |
Level 7 20 or more |
Level 6 17 or more |
Level 5 14 or more |
Level 4 11 or more |
Level 3 8 or more |
Level 2 5 or more |
Level 1 0 or more |
|
|
|
|
|
|
|
|
|
