A dataset generalizes ZIP codes and birthdates but still allows inference of individuals.

A manager role inherits all employee permissions, including newly added sensitive access. What risk is highlighted?

A firewall tracks active connections and allows only packets belonging to valid sessions.

A system creates roles like Analyst_ProjectA, Analyst_ProjectB, Analyst_ProjectC, leading to an unmanageable number of roles. This is an example of: 

A company currently uses RBAC. They are experiencing: Users accumulating too many permissions over time Difficulty handling time-based access (e.g., only during work hours) Concerns about fraud from conflicting roles Question:Explain the limitations of RBAC in this scenario. Propose specific changes (e.g., additional models, constraints, or mechanisms) to address each issue, and justify your choices.

A doctor can access records anytime, from any device, without restriction. This highlights a limitation in systems that lack:

One user in an anonymity set has a much higher likelihood of being the sender.

A system allows file owners to decide who can read or write their files. This is the description of: 

A ____ scheme is a type of investment fraud where returns to earlier investors are paid using funds from newer investors, rather than legitimate profits.      

Nancy deposits $1,000 into a Merrill Lynch mutual fund growth fund in four separate months.  The purchase prices of the fund are: Month 1: $40, Month 2: $50, Month 3: $50, Month 4: $40. What is the average cost per share for Nancy?