[Cisspstudy] Bls: the question about system accountability

[Deddy Nadeak]

If the subject can pass the identification and authentication mechanism then it would be sufficiently accountable for any action committed. One of many use of auditing is to proof accountability.


-- Stay secured --

--- Pada Sab, 7/11/09, jack wang <windjie at gmail.com> menulis:

Dari: jack wang <windjie at gmail.com>
Judul: [Cisspstudy] the question about system accountability
Kepada: "The CISSP Study Mailing list" <cisspstudy at cccure.org>
Tanggal: Sabtu, 7 November, 2009, 3:09 AM

the quiz in cccure.org say:Which of the following is not needed for System Accountability? 

auditing.
authentication.
›authorization.
identification.the explaination is:Authorization is not a requirement of accountability. One reason for accountability is security violations. If an individual is accessing or attempting to access information or areas that they are not authorized you would be able to trace them.
what's the mean? I thank authorization is need for accountabilitywho can explain them?  
Much appreciate!

-----Berikut adalah Lampiran dalam Pesan-----

_______________________________________________
cisspstudy mailing list
cisspstudy at cccure.org
http://cccure.org/mailman/listinfo/cisspstudy_cccure.org



      &quot;Coba Yahoo! Mail baru yang LEBIH CEPAT. Rasakan bedanya sekarang! 
http://id.mail.yahoo.com&quot;
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://cccure.org/pipermail/cisspstudy_cccure.org/attachments/20091107/5196c745/attachment.html>