01
Front
What does network access control determine?
Back
It determines which users, devices, or services may use a resource, which actions they may perform, and under what conditions.
Free Online Flashcard Deck
3 Network Access Control Free Online FlashCards
Study 3 Network Access Control with 12 free online flashcards. Review key terms, definitions, and concepts with this interactive flashcard deck.
12 cards
02
Front
What three elements define an access request?
Back
The subject is the requester, the resource is what it wants to use, and the action is what it wants to do.
03
Front
How do authentication and authorization differ?
Back
Authentication establishes or verifies an identity; authorization determines what that identity is allowed to do.
04
Front
What does least privilege require?
Back
Grant only the permissions needed for assigned tasks, limited to the necessary resources and duration.
05
Front
What is the default-deny principle?
Back
Deny a request unless a rule explicitly permits it. This avoids relying on a default-allow policy with exceptions.
06
Front
How does separation of duties limit account risk?
Back
Avoid giving one account unnecessary control over both routine work and security administration.
07
Front
How does an access-control list assign permissions?
Back
An access-control list attaches permissions to a resource, specifying which users, groups, addresses, or services may perform particular actions.
08
Front
How does role-based access control grant permissions?
Back
Role-based access control assigns permissions to roles, then assigns users to appropriate roles.
09
Front
What does attribute-based access control evaluate?
Back
Attribute-based access control evaluates attributes of the subject, resource, requested action, and possibly the environment against policies or rules.
10
Front
How can access-control models be combined?
Back
Role-based permissions can be combined with conditions such as device status or resource sensitivity.
11
Front
What should a network access rule specify?
Back
Specify the relevant source, destination, service or port, action, and any required conditions.
12
Front
Does internal network location alone authorize access?
Back
Being on an internal network does not automatically authorize access; decisions should consider the subject and the resource.
Related study packs and tools
- Quiz
1 Foundations of Threat Analysis
A medium-difficulty quiz on threat-analysis concepts, evidence, lifecycle, and defensive decisions.
- Quiz
1 Networking Fundamentals
A medium-difficulty quiz on networking fundamentals, including communication roles, protocol layers, data units, and network models.
CompTIA A+ NetworkingUpdated - Flashcards
2 Protocols and Ports
Review how TCP and UDP work, what common network ports indicate, and how to interpret port clues cautiously.
CompTIA A+ NetworkingUpdated - Quiz
2 Protocols and Ports
A medium-difficulty quiz on interpreting network protocols, ports, and common traffic patterns.
CompTIA A+ NetworkingUpdated - Quiz
5 Network Operations and Reliability
A medium-difficulty quiz on network operations, monitoring, configuration management, resilience, and recovery planning.
- Quiz
6 Certificates and Public Key Infrastructure
A medium-difficulty quiz on certificates and public key infrastructure, focused on applying concepts to practical validation and issuance scenarios.
- Quiz
6 Diagnosing Network Problems
A medium-difficulty quiz on diagnosing network problems by testing systematically, interpreting evidence, and narrowing down likely causes.
- Study guide
6 Security Operations and Incident Response
Learn how security teams monitor activity, manage vulnerabilities, respond to incidents, preserve digital evidence, and restore services safely.
- Quiz
6 SOHO Network Setup and Troubleshooting
A medium-difficulty quiz on setting up, securing, and troubleshooting a small-office/home-office network.
CompTIA A+ NetworkingUpdated - Study guide
7 Integrated Troubleshooting Practice
A practical workflow for isolating mixed hardware, display, storage, mobile-device, and network problems, protecting data, and verifying repairs.
- Study guide
8 Comprehensive Security+ Practice and Review
A scenario-focused guide to Security+ SY0-701 concepts, emphasizing evidence-based incident response, access control, cryptography, vulnerability handling, recovery objectives, and risk governance.
- Study guide
8 Security Operations and Incident Response
Learn how to recognize and assess security incidents, preserve evidence, contain and remove threats, restore trustworthy services, and improve security through lessons learned.