Question:

(a)

i. Explain what is meant by Discretionary Access Control and Mandatory Access Control

ii. Which method would be the most effective to ensure that users do not share files with other users not approved for access?

(b) Outline three main differences between the Liberty Alliance specification and the Microsoft .NET Passport System.

(c) Explain what is meant by the term ‘single sign-on' in the context of access control?

(d) Give three examples of single sign-on technologies.

(e) Compare the relative merits of a network based IDS and a host based IDS.

(f) Explain the main stages in the penetration testing process.