Which of the following access controls enforces permissions based on data labeling at specific levels?

The correct answer is A. Mandatory access control. Mandatory Access Control (MAC) enforces access permissions based on classification labels assigned to data (e.g., Top Secret, Secret, Confidential, Unclassified) and clearance levels assigned to users. The operating system or security kernel - not the data owner - makes all…

Network security

Question

Options

AMandatory access control
BSeparation of duties access control
CDiscretionary access control
DRole based access control

How the community answered

(29 responses)

A
90% (26)
C
3% (1)
D
7% (2)

Explanation

Mandatory Access Control (MAC) enforces access permissions based on classification labels assigned to data (e.g., Top Secret, Secret, Confidential, Unclassified) and clearance levels assigned to users. The operating system or security kernel - not the data owner - makes all access decisions. This is the model used in government and military systems. Discretionary Access Control (DAC) lets data owners set permissions. Role-Based Access Control (RBAC) assigns permissions based on job roles. Separation of duties divides tasks to prevent fraud, not based on data labels.

Topics

#mandatory access control#data labeling#access control models#MAC

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice