SSCP · Question #1130
____________ is used in mission critical systems and applications to lock down information based on sensitivity levels (Confidential, Top Secret, etc..
The correct answer is A. MAC - Mandatory Access Control. Mandatory Access Control (MAC) is a security model used in highly sensitive environments, such as mission-critical systems, to enforce strict access restrictions based on predefined sensitivity labels.
Question
____________ is used in mission critical systems and applications to lock down information based on sensitivity levels (Confidential, Top Secret, etc..
Options
- AMAC - Mandatory Access Control
- BDAC - Discretionary Access Control
- CSAC - Strategic Access Control
- DLAC - Limited Access Control
How the community answered
(30 responses)- A93% (28)
- B3% (1)
- C3% (1)
Why each option
Mandatory Access Control (MAC) is a security model used in highly sensitive environments, such as mission-critical systems, to enforce strict access restrictions based on predefined sensitivity labels.
Mandatory Access Control (MAC) is an access control model where the operating system or security kernel enforces access rules based on security labels assigned to subjects (users/processes) and objects (files/resources). In MAC, the administrator, not the owner, defines these labels and policies (e.g., Top Secret, Confidential), making it ideal for high-security, mission-critical systems requiring strict information lockdown.
Discretionary Access Control (DAC) allows resource owners to grant or deny access to their resources, which is less restrictive and unsuitable for mission-critical systems requiring centralized, non-discretionary enforcement of sensitivity levels.
Strategic Access Control (SAC) is not a recognized standard access control model in information security.
Limited Access Control (LAC) is not a recognized standard access control model in information security.
Concept tested: Mandatory Access Control (MAC)
Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/access-control-models
Topics
Community Discussion
No community discussion yet for this question.