CISSP · Question #582
What access control scheme uses fine-grained rules to specify the conditions under which access to each data item or applications is granted?
The correct answer is D. Attribute Based Access Control (ABAC). Attribute Based Access Control (ABAC) is the access control scheme that uses fine-grained rules to specify the conditions under which access to each data item or application is granted. ABAC is a type of access control that grants or denies access to a system or a resource based
Question
What access control scheme uses fine-grained rules to specify the conditions under which access to each data item or applications is granted?
Options
- AMandatory Access Control (MAC)
- BDiscretionary Access Control (DAC)
- CRole Based Access Control (RBAC)
- DAttribute Based Access Control (ABAC)
How the community answered
(36 responses)- A3% (1)
- B3% (1)
- D94% (34)
Explanation
Attribute Based Access Control (ABAC) is the access control scheme that uses fine-grained rules to specify the conditions under which access to each data item or application is granted. ABAC is a type of access control that grants or denies access to a system or a resource based on the attributes of the subject, the object, the environment, and the action. Attributes are the characteristics or the properties that describe the entities involved in the access request, such as the identity, the role, the location, the time, the device, the sensitivity, or the purpose. Rules are the logical expressions that define the relationships and the constraints between the attributes, and that determine the access decision. ABAC can provide fine-grained access control, as it can specify the conditions for access at the level of individual data items or applications, and it can dynamically adjust the access based on the context and the situation. ABAC can also provide flexible and scalable access control, as it can support multiple policies and scenarios, and it can accommodate the changes in the attributes or the rules without requiring manual intervention.
Topics
Community Discussion
No community discussion yet for this question.