What are the three main concepts of access control?

The correct answer is B. Objects, Rules, Subjects. Access control is built around three core concepts: Subjects (the entities requesting access, such as users or processes), Objects (the resources being accessed, such as files or systems), and Rules (the policies or permissions that define what subjects can do with objects)…

Access Controls Concepts

Question

Options

AManagers, Subjects, Data
BObjects, Rules, Subjects
CTopics, Objects, Rules
DConfidentiality, Integrity, and Availability

How the community answered

(53 responses)

A
2% (1)
B
89% (47)
C
2% (1)
D
8% (4)

Explanation

Access control is built around three core concepts: Subjects (the entities requesting access, such as users or processes), Objects (the resources being accessed, such as files or systems), and Rules (the policies or permissions that define what subjects can do with objects). Option D (CIA) describes information security goals, not access control components. Options A and C contain terms like 'Managers,' 'Topics,' and 'Data' that are not standard access control concepts. The subject-object-rule triad is fundamental to all access control models.

Topics

#Access Control#Access Control Concepts#Subjects#Objects#Rules

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice