Which of the following would be used to implement Mandatory Access Control (MAC)?

The correct answer is C. Lattice-based access control. MAC is implemented using lattice-based models, where subjects and objects are assigned sensitivity labels (e.g., Top Secret, Secret) and compartments, and access is granted only when the label relationship satisfies the policy. Clark-Wilson is an integrity model, not MAC…

Submitted by marco_it· Apr 18, 2026Access Controls

Question

Which of the following would be used to implement Mandatory Access Control (MAC)?

Options

AClark-Wilson Access Control
BRole-based access control
CLattice-based access control
DUser dictated access control

How the community answered

(46 responses)

A
2% (1)
B
4% (2)
C
91% (42)
D
2% (1)

Explanation

MAC is implemented using lattice-based models, where subjects and objects are assigned sensitivity labels (e.g., Top Secret, Secret) and compartments, and access is granted only when the label relationship satisfies the policy. Clark-Wilson is an integrity model, not MAC. Role-based access control (RBAC) is a form of non-discretionary access control, not MAC. User-dictated access control describes Discretionary Access Control (DAC).

Topics

#Mandatory Access Control (MAC)#Lattice-based Access Control#Access Control Models#Security Models

Community Discussion

No community discussion yet for this question.

Full SSCP Practice