nerdexam
GIAC

GSLC · Question #286

GSLC Question #286: Real Exam Question with Answer & Explanation

The correct answer is C. RBAC. This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.

Question

Which of the following options is an approach to restricting system access to authorized users?

Options

  • AMIC
  • BDAC
  • CRBAC
  • DMAC

Explanation

This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.

Common mistakes.

  • A. MIC (Mandatory Integrity Control) is a Windows-specific integrity enforcement mechanism based on integrity levels, not a general access control model for restricting system access to authorized users.
  • B. DAC (Discretionary Access Control) allows individual resource owners to set access permissions at their own discretion, which is less structured and less enforceable as a system-wide authorization strategy.
  • D. MAC (Mandatory Access Control) enforces access based on security labels and administrator-defined policies rather than user roles, and is typically used in high-security government environments rather than general user authorization.

Concept tested. Role-Based Access Control (RBAC) user authorization model

Reference. https://csrc.nist.gov/projects/role-based-access-control

Community Discussion

No community discussion yet for this question.

Full GSLC Practice