Daily Archives: May 29, 2013

2. Exam Essentials for Access Control Attacks and Monitoring

Posted on May 29, 2013 by Carmelo

Understand basic risk elements Risk is the likelihood that a threat can exploit a vulnerability and cause damage to assets. Asset valuation identifies the value of assets Threat modeling identifies threats against these assets Vulnerability analysis identifies weaknesses in an … Continue reading →

Posted in CISSP-Study | Tagged , , | Comments Off on 2. Exam Essentials for Access Control Attacks and Monitoring

1. Exam Essentials for Access Control

Posted on May 29, 2013 by Carmelo

Know the difference between subject and objects and know common subject labels. Subjects are active entities, like users. Objects are passive, like files. Labels: A user is a subject who accesses objects in the course of performing some action or … Continue reading →

Posted in CISSP-Study | Tagged , , | Comments Off on 1. Exam Essentials for Access Control