nerdexam
(ISC)2

SSCP · Question #112

Which access control model would a lattice-based access control model be an example of?

The correct answer is A. Mandatory access control. A lattice-based access control model assigns security labels (sensitivity levels and categories) to both subjects and objects, then enforces access based on the mathematical relationship between those labels - a defining characteristic of Mandatory Access Control (MAC). In MAC…

Submitted by anna_se· Apr 18, 2026Access Controls

Question

Which access control model would a lattice-based access control model be an example of?

Options

  • AMandatory access control.
  • BDiscretionary access control.
  • CNon-discretionary access control.
  • DRule-based access control.

How the community answered

(45 responses)
  • A
    91% (41)
  • B
    2% (1)
  • C
    2% (1)
  • D
    4% (2)

Explanation

A lattice-based access control model assigns security labels (sensitivity levels and categories) to both subjects and objects, then enforces access based on the mathematical relationship between those labels - a defining characteristic of Mandatory Access Control (MAC). In MAC, the system (not the data owner) enforces policy. Discretionary access control lets owners set permissions; non-discretionary is a broad term covering role-based and MAC; rule-based uses specific rules but is still a subset of MAC or non-discretionary, not the specific answer for lattice-based models.

Topics

#Access Control Models#Mandatory Access Control (MAC)#Lattice-Based Access Control

Community Discussion

No community discussion yet for this question.

Full SSCP Practice