nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #256

What model is utilized in Mandatory Access Control (MAC)?

The correct answer is D. Lattice based. Mandatory Access Control (MAC) uses a lattice-based model where the operating system (not the data owner) assigns security labels (e.g., Top Secret, Secret, Unclassified) to subjects and objects. Access decisions are made by comparing these labels according to a defined policy…

Access Controls Concepts

Question

What model is utilized in Mandatory Access Control (MAC)?

Options

  • AGroup based
  • BRule based
  • CDiscretionary
  • DLattice based

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • D
    91% (30)

Explanation

Mandatory Access Control (MAC) uses a lattice-based model where the operating system (not the data owner) assigns security labels (e.g., Top Secret, Secret, Unclassified) to subjects and objects. Access decisions are made by comparing these labels according to a defined policy. The lattice structure defines upper and lower bounds of access. Discretionary Access Control (DAC) lets the resource owner decide permissions. Role-Based Access Control (RBAC) uses group/role-based policies. Rule-based access control applies conditional rules, not labels.

Topics

#Mandatory Access Control (MAC)#Lattice-based Security Model#Access Control Models#Security Models

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice