Another type of access control is lattice-based access control. In this type of control a lattice model is applied. How is this type of access control concept applied?

Question

Options

• AThe pair of elements is the subject and object, and the subject has an upper bound equal
• BThe pair of elements is the subject and object, and the subject has an upper bound lower
• CThe pair of elements is the subject and object, and the subject has no special upper or
• DThe pair of elements is the subject and object, and the subject has no access rights in

• A
  86% (31)
• B
  8% (3)
• C
  3% (1)
• D
  3% (1)

Explanation

Option A is correct because lattice-based access control (LBAC) works by pairing a subject (user/process) with an object (resource), where the subject is assigned an upper bound sensitivity label that must be equal to or greater than the object's classification level to permit access - this "dominance" relationship is the core mechanism of the lattice model.

Option B is wrong because if the subject's upper bound is lower than the object's label, the subject cannot access the object; this describes a denied state, not how the model is applied.

Option C is wrong because the entire premise of a lattice model is that elements do have defined upper and lower bounds - removing those bounds would eliminate the structure that makes the model function.

Option D is wrong because it incorrectly implies the subject has no access rights at all, which contradicts the purpose of assigning a subject an upper bound within the lattice.

Memory tip: Think of a lattice like a corporate org chart - you can only see documents at your level or below (your clearance is the ceiling/upper bound). If your clearance equals the document's label, you're in; if it's lower, you're out.

No community discussion yet for this question.