Fernandez, a computer user, initiated an action to access a file located on a remote server. In this process, his account went through certain security constraints to check for any restrictions on…

Question

Options

• AOperation
• BSubject
• CReference monitor
• DObject

• A
  4% (1)
• B
  4% (1)
• D
  92% (23)

Explanation

In access control terminology, an object is any passive resource that a subject attempts to access - files, databases, printers, or memory segments all qualify. Here, the file on the remote server is the passive entity being acted upon, making D (Object) correct.

Why the distractors are wrong:

• A. Operation - An operation is the action being performed (read, write, execute), not the resource itself.
• B. Subject - The subject is the active entity initiating the access request - that's Fernandez (or his account/process), not the file.
• C. Reference monitor - The reference monitor is the security enforcement mechanism that validates access requests against policy; it's the "security constraints" checking process described in the scenario, not the file.

Memory tip: Think S-O-O: Subject acts, Operation is how, Object is what gets acted on. The subject (Fernandez) performs an operation (access/read) on an object (the file). If it can be locked in a vault, it's an object.

No community discussion yet for this question.