CERTIFIED-IN-CYBERSECURITY · Question #256
What model is utilized in Mandatory Access Control (MAC)?
The correct answer is D. Lattice based. Mandatory Access Control (MAC) uses a lattice-based model where the operating system (not the data owner) assigns security labels (e.g., Top Secret, Secret, Unclassified) to subjects and objects. Access decisions are made by comparing these labels according to a defined policy…
Question
What model is utilized in Mandatory Access Control (MAC)?
Options
- AGroup based
- BRule based
- CDiscretionary
- DLattice based
How the community answered
(33 responses)- A6% (2)
- B3% (1)
- D91% (30)
Explanation
Mandatory Access Control (MAC) uses a lattice-based model where the operating system (not the data owner) assigns security labels (e.g., Top Secret, Secret, Unclassified) to subjects and objects. Access decisions are made by comparing these labels according to a defined policy. The lattice structure defines upper and lower bounds of access. Discretionary Access Control (DAC) lets the resource owner decide permissions. Role-Based Access Control (RBAC) uses group/role-based policies. Rule-based access control applies conditional rules, not labels.
Topics
Community Discussion
No community discussion yet for this question.