In which of the following model are Subjects and Objects identified and the permissions applied to each subject/object combination are specified. Such a model can be used to quickly summarize what…

Question

Options

• AAccess Control Matrix model
• BTake-Grant model
• CBell-LaPadula model
• DBiba model

• A
  91% (20)
• C
  5% (1)
• D
  5% (1)

Explanation

Access Control Matrix (A) is correct because it is literally a table with Subjects (users, processes) as rows and Objects (files, resources) as columns, where each cell specifies the permissions that subject holds for that object - giving an instant summary of who can do what across the entire system.

Take-Grant (B) is wrong - it models how rights can be transferred between subjects over time using graph theory, not a static matrix of permissions.

Bell-LaPadula (C) is wrong - it is a confidentiality model focused on preventing unauthorized reading of data (no read up, no write down), not a general permissions matrix.

Biba (D) is wrong - it is an integrity model (the inverse of Bell-LaPadula), focused on preventing unauthorized modification of data, not mapping subject/object permissions.

Memory tip: Think of the Access Control Matrix as a spreadsheet - rows are who (subjects), columns are what (objects), and each cell answers "can they?" The name itself tells you the structure: a matrix.

No community discussion yet for this question.