SSCP · Question #7
A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism that enforces…
The correct answer is A. Content-dependent access control. When access control is based on the content of an object, it is considered to be content dependent access control. Content-dependent access control is based on the content itself. The following answers are incorrect: context-dependent access control. Is incorrect because this…
Question
A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism that enforces this policy would typically be said to provide which of the following?
Options
- AContent-dependent access control
- BContext-dependent access control
- CLeast privileges access control
- DOwnership-based access control
How the community answered
(49 responses)- A90% (44)
- B2% (1)
- C4% (2)
- D4% (2)
Explanation
When access control is based on the content of an object, it is considered to be content dependent access control. Content-dependent access control is based on the content itself. The following answers are incorrect: context-dependent access control. Is incorrect because this type of control is based on what the context is, facts about the data rather than what the object contains. least privileges access control. Is incorrect because this is based on the least amount of rights needed to perform their jobs and not based on what is contained in the database. ownership-based access control. Is incorrect because this is based on the owner of the data and and not based on what is contained in the database.
Topics
Community Discussion
No community discussion yet for this question.