GSLC · Question #286
Which of the following options is an approach to restricting system access to authorized users?
The correct answer is C. RBAC. This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.
Question
Which of the following options is an approach to restricting system access to authorized users?
Options
- AMIC
- BDAC
- CRBAC
- DMAC
How the community answered
(60 responses)- A3% (2)
- B2% (1)
- C95% (57)
Why each option
This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.
MIC (Mandatory Integrity Control) is a Windows-specific integrity enforcement mechanism based on integrity levels, not a general access control model for restricting system access to authorized users.
DAC (Discretionary Access Control) allows individual resource owners to set access permissions at their own discretion, which is less structured and less enforceable as a system-wide authorization strategy.
RBAC (Role-Based Access Control) restricts system access by assigning permissions to defined roles rather than to individual users, and users are granted access by being assigned to appropriate roles. This model directly enforces the principle that only authorized users gain access to specific resources, making it the primary model for managing user authorization at scale.
MAC (Mandatory Access Control) enforces access based on security labels and administrator-defined policies rather than user roles, and is typically used in high-security government environments rather than general user authorization.
Concept tested: Role-Based Access Control (RBAC) user authorization model
Source: https://csrc.nist.gov/projects/role-based-access-control
Topics
Community Discussion
No community discussion yet for this question.