SSCP · Question #108
Which of the following access control models requires defining classification for objects?
The correct answer is D. Mandatory access control. With mandatory access control (MAC), the authorization of a subject's access to an object is dependant upon labels, which indicate the subject's clearance, and classification of objects. The Following answers were incorrect: Identity-based Access Control is a type of…
Question
Which of the following access control models requires defining classification for objects?
Options
- ARole-based access control
- BDiscretionary access control
- CIdentity-based access control
- DMandatory access control
How the community answered
(40 responses)- A3% (1)
- B3% (1)
- C8% (3)
- D88% (35)
Explanation
With mandatory access control (MAC), the authorization of a subject's access to an object is dependant upon labels, which indicate the subject's clearance, and classification of objects. The Following answers were incorrect: Identity-based Access Control is a type of Discretionary Access Control (DAC), they are Role Based Access Control (RBAC) and Rule Based Access Control (RuBAC or RBAC) are types of Non Discretionary Access Control (NDAC). When you have two answers that are synonymous they are not the right choice for sure. There is only one access control model that makes use of Label, Clearances, and Categories, it is Mandatory Access Control, none of the other one makes use of those items.
Topics
Community Discussion
No community discussion yet for this question.