Answer the following statements true (T) or false (F)

1. Access control is the central element of computer security.
2. The authentication function determines who is trusted for a given purpose.
3. An auditing function monitors and keeps a record of user accesses to
system resources.
4. External devices such as firewalls cannot provide access control services.
5. The principal objectives of computer security are to prevent unauthorized users from gaining access to resources, to prevent legitimate users from accessing resources in an unauthorized manner, and to enable legitimate users to access resources in an authorized manner.

1. True
2. False
3. True
4. False
5. True