nerdexam
(ISC)2

SSCP · Question #47

To control access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up:

The correct answer is A. Access Rules. Controlling access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up access rules. These rules can be classified into three access control models: Mandatory, Discretionary, and Non-Discretionary. An…

Submitted by weili_xi· Apr 18, 2026Access Controls

Question

To control access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up:

Options

  • AAccess Rules
  • BAccess Matrix
  • CIdentification controls
  • DAccess terminal

How the community answered

(40 responses)
  • A
    90% (36)
  • B
    3% (1)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Controlling access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up access rules. These rules can be classified into three access control models: Mandatory, Discretionary, and Non-Discretionary. An access matrix is one of the means used to implement access control.

Topics

#Access control#Access rules#Authorization#Subject-object model

Community Discussion

No community discussion yet for this question.

Full SSCP Practice