cisco certification kit

cisco certification kit.Authentication Can you prove you are who you are Password, access card, fingerprintAuthorization Can you access the resource? What kind of operations can you perform on the resource User A can read and write to access the resource BWhat have you done to the resource User A modified resource B on 31 August 2016Important concepts of identification, authentication, authorization, and bookkeeping are shown below. Identification is the process of showing identity. Authentication is the process of proving identity. Authorization is the process of giving a subject or user access to a resource with specific access rights. Bookkeeping is the process of auditing and monitoring the actions done by the user to the resource.4.5 The Access Control Process As mentioned earlier, it is the access control process that is responsible for controlling the granting, blocking, or revoking of access to resources. The core of the access control process is the establishment of access control policies or rules that determine the types of accesses and access times to be assigned. In order to determine the access control policy, the policy maker needs to assess the assets or data one-by-one, that is, a reasonable control mechanism can be established only if the importance of the various assets in the unit is fully recognized. Then, assets should be appropriately tagged so that their classification is clear to each employee, and appropriate disposal policies need to be established when access to resources is no longer needed.Stone posthumously, the following shows important terms related to the access control process.The whole point asset or data classification ( assetordataclassification): is the process of classifying data according to the risks faced by the unit (risks related to the breach of confidentiality, integrity, availability of data). assetmarking: The process of "marking" or "tagging" assets or data to make their classification clear to users.accessspolicydefinition: The process of defining policies and rules that control access to an asset.datadisposal: The process of disposing of or destroying an asset or data.