SSCP · Question #112
Which access control model would a lattice-based access control model be an example of?
The correct answer is A. Mandatory access control. A lattice-based access control model assigns security labels (sensitivity levels and categories) to both subjects and objects, then enforces access based on the mathematical relationship between those labels - a defining characteristic of Mandatory Access Control (MAC). In MAC…
Question
Options
- AMandatory access control.
- BDiscretionary access control.
- CNon-discretionary access control.
- DRule-based access control.
How the community answered
(45 responses)- A91% (41)
- B2% (1)
- C2% (1)
- D4% (2)
Explanation
A lattice-based access control model assigns security labels (sensitivity levels and categories) to both subjects and objects, then enforces access based on the mathematical relationship between those labels - a defining characteristic of Mandatory Access Control (MAC). In MAC, the system (not the data owner) enforces policy. Discretionary access control lets owners set permissions; non-discretionary is a broad term covering role-based and MAC; rule-based uses specific rules but is still a subset of MAC or non-discretionary, not the specific answer for lattice-based models.
Topics
Community Discussion
No community discussion yet for this question.