nerdexam
(ISC)2

SSCP · Question #1130

____________ is used in mission critical systems and applications to lock down information based on sensitivity levels (Confidential, Top Secret, etc..

The correct answer is A. MAC - Mandatory Access Control. Mandatory Access Control (MAC) is a security model used in highly sensitive environments, such as mission-critical systems, to enforce strict access restrictions based on predefined sensitivity labels.

Submitted by lucia.co· Apr 18, 2026Access Controls

Question

____________ is used in mission critical systems and applications to lock down information based on sensitivity levels (Confidential, Top Secret, etc..

Options

  • AMAC - Mandatory Access Control
  • BDAC - Discretionary Access Control
  • CSAC - Strategic Access Control
  • DLAC - Limited Access Control

How the community answered

(30 responses)
  • A
    93% (28)
  • B
    3% (1)
  • C
    3% (1)

Why each option

Mandatory Access Control (MAC) is a security model used in highly sensitive environments, such as mission-critical systems, to enforce strict access restrictions based on predefined sensitivity labels.

AMAC - Mandatory Access ControlCorrect

Mandatory Access Control (MAC) is an access control model where the operating system or security kernel enforces access rules based on security labels assigned to subjects (users/processes) and objects (files/resources). In MAC, the administrator, not the owner, defines these labels and policies (e.g., Top Secret, Confidential), making it ideal for high-security, mission-critical systems requiring strict information lockdown.

BDAC - Discretionary Access Control

Discretionary Access Control (DAC) allows resource owners to grant or deny access to their resources, which is less restrictive and unsuitable for mission-critical systems requiring centralized, non-discretionary enforcement of sensitivity levels.

CSAC - Strategic Access Control

Strategic Access Control (SAC) is not a recognized standard access control model in information security.

DLAC - Limited Access Control

Limited Access Control (LAC) is not a recognized standard access control model in information security.

Concept tested: Mandatory Access Control (MAC)

Source: https://learn.microsoft.com/en-us/windows/security/identity-protection/access-control/access-control-models

Topics

#Mandatory Access Control (MAC)#Access Control Models#Sensitivity Labels#Information Classification

Community Discussion

No community discussion yet for this question.

Full SSCP Practice