What is the principle of least privilege? What does DACL stands for and what doe
ID: 3559705 • Letter: W
Question
What is the principle of least privilege?
What does DACL stands for and what does it mean?
Why would you add permission to a group instead of the individual?
Why would you allow shared access to groups instead of to everyone?
List at least 3 different types of access control permissions you can enable for a file
Which access control permission needed in order to view the contents of a folder?
What is the lowest level permission allow you to delete files and/or folder?
If you do not remember the syntax when usingIcacls.exe what command do you type in to see the option?
What other tool could you use to modify the privileges of the files or folders of a shared drive?
Explanation / Answer
1.What is the principle of least privilege?
Answer:In information security, computer science, and other fields, the principle of least privilege (also known as the principle of minimal privilege or the principle of least authority) requires that in a particular abstraction layer of a computing environment, every module (such as a process, a user or a program depending on the subject) must be able to access only the information and resources that are necessary for its legitimate purpose.
-----------------------------
2.What does DACL stands for and what does it mean?
Answer: DACL stand for Discretionary access control List
Discretionary access control List (DACL) is a type of access control defined by the Trusted Computer System Evaluation Criteria "as a means of restricting access to objects based on the identity of subjects and/or groups to which they belong. The controls are discretionary in the sense that a subject with certain access permission is capable of passing that permission (perhaps indirectly) on to any other subject (unless restrained by mandatory access control)".
-----------------------------
3.Why would you add permission to a group instead of the individual?
Answer: Adding permissions in a group is a lot more resourceful and less time consuming via individually.
(OR)Management of the permissions (add/remove) is easier to do from the Group Level, other than Individual User and is quicker.
-----------------------------
4.Why would you allow shared access to groups instead of to everyone?
Answer:By allowing access by Groups it is easier to manage
Related Questions
drjack9650@gmail.com
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.