nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #187

Access is based on which three elements:

The correct answer is C. Subject, Object, and Rules. In access control theory, the three foundational elements are: Subject (the entity-user, process, or system-requesting access), Object (the resource being accessed-a file, database, or device), and Rules (the policies or permissions that define what actions the subject may…

Access Controls Concepts

Question

Access is based on which three elements:

Options

  • ASubject, Permissions, and Rules
  • BPermissions, Layers, and Rules
  • CSubject, Object, and Rules
  • DSubject, Layers, and Rules

How the community answered

(24 responses)
  • A
    4% (1)
  • C
    92% (22)
  • D
    4% (1)

Explanation

In access control theory, the three foundational elements are: Subject (the entity-user, process, or system-requesting access), Object (the resource being accessed-a file, database, or device), and Rules (the policies or permissions that define what actions the subject may perform on the object). Together these form the basis of all access control decisions. 'Layers' and 'Permissions' are not the standard triad; permissions are an output of the rules, and layers describe depth of security architecture rather than access control elements.

Topics

#Access Control#Security Fundamentals#Authorization

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice