A periodic review of user account management should NOT determine:

Which access control type has a central authority that determine to what objects the subjects have access to
and it is based on role or on the organizational security policy?

The type of discretionary access control (DAC) that is based on an individual’s identity is also called:

Rule-Based Access Control (RuBAC) access is determined by rules. Such rules would fit within what category
of access control?

Technical controls such as encryption and access control can be built into the operating system, be software
applications, or can be supplemental hardware/software units. Such controls, also known as logical controls,
represent which pairing?

A central authority determines what subjects can have access to certain objects based on the organizational
security policy is called:

Access Control techniques do NOT include which of the following?

In the context of access control, locks, gates, guards are examples of which of the following?

What is the main concern with single sign-on?

What physical characteristic does a retinal scan biometric device measure?