cisco certification levels

cisco certification levels.Detective Deploy an intrusion detection systemCorrective Employee separation systemRestorative Perform data backupsRemedial Manual verification of user identityFigure 4-2 shows the correspondence between the various access control types and the CiscoAttackContinuum. Before an attack occurs, preventive and deterrent access controls can be enabled to harden the system against the attack. During an attack, detective and corrective access controls can be enabled to detect the attack and mitigate the impact of the attack. After an attack has occurred, restorative access controls may be used to restore the system to its normal state. Remedial access controls will be available across the attack continuum and can be enabled before, during and after an attack.Figure 4-2 Correspondence between various access control types and the Cisco attack continuum192 Chapter 4 Introduction to Access Control4.8 Access Control Models An access control model is a conceptual framework that describes a method for designing access control (subject-object interaction). There are several access control models, for example, the Identity-Based Access Control (IBAC) model, which is an access control model that authorizes access to resources based on the identity of the subject. However, any access control model can generally be classified as a discretionary access control and a nondiscretionary access control model. The key difference between the two is who decides in what way to enforce the policy on the entity. With the autonomous access control model, the owner of the object has the right to decide who will access the object. Non-autonomous access control models are a broad category that includes all types of access control models where the central management system, rather than the owner of the object, decides how to authorize. The following types of access control models are discussed in detail in this section.Autonomous Access Control (DAC) models.MandatoryAccess Control (MAC) model.