GIAC
GSLC · Question #286
GSLC Question #286: Real Exam Question with Answer & Explanation
The correct answer is C. RBAC. This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.
Question
Which of the following options is an approach to restricting system access to authorized users?
Options
- AMIC
- BDAC
- CRBAC
- DMAC
Explanation
This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.
Common mistakes.
- A. MIC (Mandatory Integrity Control) is a Windows-specific integrity enforcement mechanism based on integrity levels, not a general access control model for restricting system access to authorized users.
- B. DAC (Discretionary Access Control) allows individual resource owners to set access permissions at their own discretion, which is less structured and less enforceable as a system-wide authorization strategy.
- D. MAC (Mandatory Access Control) enforces access based on security labels and administrator-defined policies rather than user roles, and is typically used in high-security government environments rather than general user authorization.
Concept tested. Role-Based Access Control (RBAC) user authorization model
Reference. https://csrc.nist.gov/projects/role-based-access-control
Community Discussion
No community discussion yet for this question.