What is access control policy?

The correct answer is C. A set of guidelines and procedures for managing access to resources and data. An access control policy is a formal document or framework that defines the rules, roles, and procedures governing who can access what resources under what conditions. It is broader than a simple list of users (D) or a list of resources (B) - it encompasses the overall…

Access Controls Concepts

Question

Options

AA list of network devices and their configurations
BA list of resources and their security requirements
CA set of guidelines and procedures for managing access to resources and data
DA list of authorized users and their privileges

How the community answered

(24 responses)

A
4% (1)
B
8% (2)
C
88% (21)

Explanation

An access control policy is a formal document or framework that defines the rules, roles, and procedures governing who can access what resources under what conditions. It is broader than a simple list of users (D) or a list of resources (B) - it encompasses the overall governance model, including how access is granted, reviewed, revoked, and audited. A list of network device configurations (A) is unrelated. The policy underpins mechanisms like RBAC, MAC, and DAC by stating the organizational intent behind access decisions.

Topics

#Access Control#Security Policy#Cybersecurity Fundamentals

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice