CERTIFIED-IN-CYBERSECURITY · Question #772
Using Mandatory Access Control (MAC), we would use clearance for assigning which of these?
The correct answer is B. Authorization. In Mandatory Access Control (MAC), access decisions are made by the system based on security labels (classifications) assigned to objects and clearance levels assigned to subjects (users). Clearance is used to determine Authorization - whether a subject is permitted to access a…
Question
Using Mandatory Access Control (MAC), we would use clearance for assigning which of these?
Options
- AAuditing.
- BAuthorization.
- CAvailability.
- DAuthentication.
How the community answered
(55 responses)- A4% (2)
- B89% (49)
- C5% (3)
- D2% (1)
Explanation
In Mandatory Access Control (MAC), access decisions are made by the system based on security labels (classifications) assigned to objects and clearance levels assigned to subjects (users). Clearance is used to determine Authorization - whether a subject is permitted to access a given resource. Authentication (verifying identity) and Auditing (logging activity) are separate processes. Availability is a CIA triad concept, not an access control assignment mechanism.
Topics
Community Discussion
No community discussion yet for this question.