What is the difference between 'implicit deny' and 'explicit deny' in access control?

Question

Options

• A'Implicit deny' means that access is denied unless specifically granted, while 'explicit deny' means
• B'Implicit deny' means system administrators have access denied, while explicit deny means the
• CThere is no difference between 'implicit deny' and 'explicit deny'
• D'Implicit deny' means the last user to access the system denied access, while 'explicit deny'

• A
  90% (37)
• B
  2% (1)
• C
  2% (1)
• D
  5% (2)

Explanation

Implicit deny is the foundational security principle that 'if access is not explicitly permitted, it is denied by default' - i.e., a default-deny posture. Explicit deny means there is a specific, intentional rule that denies access to a resource, overriding any permit rules. In firewall and ACL rule sets, explicit deny is often placed as a specific rule (e.g., DENY src 192.168.1.0/24), while implicit deny is the automatic block of everything not matched by a preceding allow rule. Options B, C, and D are fabrications with no basis in access control principles.

No community discussion yet for this question.