You work as Network and Security Manager for PassGuide Inc. The management of the company is quite concerned about the security of the network. The management has assigned this task to you to…

The correct answer is C. MAC. MAC (Mandatory Access Control) is the correct choice because access rights are pre-established by a central authority (system or administrator) based on classification labels and clearance levels, and individual users have no ability to modify or grant permissions themselves…

Security Architecture & Engineering

Question

You work as Network and Security Manager for PassGuide Inc. The management of the company is quite concerned about the security of the network. The management has assigned this task to you to improve the security. Which of the following access methods will you use if the method is to be primarily based on pre-established access, and users cannot change it?

Options

APAC
BOrBAC
CMAC
DRBAC

How the community answered

(30 responses)

A
7% (2)
C
90% (27)
D
3% (1)

Explanation

MAC (Mandatory Access Control) is the correct choice because access rights are pre-established by a central authority (system or administrator) based on classification labels and clearance levels, and individual users have no ability to modify or grant permissions themselves. This 'mandatory' nature is the defining characteristic. DAC (Discretionary Access Control) allows owners to set permissions. RBAC (Role-Based Access Control) assigns permissions to roles, which administrators can change, giving more flexibility. OrBAC (Organization-Based Access Control) extends RBAC with organizational context. PAC (Privilege Attribute Certificate) is a data structure used in Kerberos, not an access control model. MAC's rigid, non-user-modifiable, pre-established access policy matches the scenario exactly.

Topics

#mandatory access control#access control models#MAC vs RBAC#pre-established permissions

Community Discussion

No community discussion yet for this question.

Full GSLC Practice