nerdexam
GIAC

GSLC · Question #286

Which of the following options is an approach to restricting system access to authorized users?

The correct answer is C. RBAC. This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.

Security Architecture & Engineering

Question

Which of the following options is an approach to restricting system access to authorized users?

Options

  • AMIC
  • BDAC
  • CRBAC
  • DMAC

How the community answered

(60 responses)
  • A
    3% (2)
  • B
    2% (1)
  • C
    95% (57)

Why each option

This question tests knowledge of access control models and which one is primarily designed to restrict system access based on user authorization.

AMIC

MIC (Mandatory Integrity Control) is a Windows-specific integrity enforcement mechanism based on integrity levels, not a general access control model for restricting system access to authorized users.

BDAC

DAC (Discretionary Access Control) allows individual resource owners to set access permissions at their own discretion, which is less structured and less enforceable as a system-wide authorization strategy.

CRBACCorrect

RBAC (Role-Based Access Control) restricts system access by assigning permissions to defined roles rather than to individual users, and users are granted access by being assigned to appropriate roles. This model directly enforces the principle that only authorized users gain access to specific resources, making it the primary model for managing user authorization at scale.

DMAC

MAC (Mandatory Access Control) enforces access based on security labels and administrator-defined policies rather than user roles, and is typically used in high-security government environments rather than general user authorization.

Concept tested: Role-Based Access Control (RBAC) user authorization model

Source: https://csrc.nist.gov/projects/role-based-access-control

Topics

#access control#RBAC#DAC#MAC

Community Discussion

No community discussion yet for this question.

Full GSLC Practice