nerdexam
(ISC)2

SSCP · Question #7

A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism that enforces…

The correct answer is A. Content-dependent access control. When access control is based on the content of an object, it is considered to be content dependent access control. Content-dependent access control is based on the content itself. The following answers are incorrect: context-dependent access control. Is incorrect because this…

Submitted by manish99· Apr 18, 2026Access Controls

Question

A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism that enforces this policy would typically be said to provide which of the following?

Options

  • AContent-dependent access control
  • BContext-dependent access control
  • CLeast privileges access control
  • DOwnership-based access control

How the community answered

(49 responses)
  • A
    90% (44)
  • B
    2% (1)
  • C
    4% (2)
  • D
    4% (2)

Explanation

When access control is based on the content of an object, it is considered to be content dependent access control. Content-dependent access control is based on the content itself. The following answers are incorrect: context-dependent access control. Is incorrect because this type of control is based on what the context is, facts about the data rather than what the object contains. least privileges access control. Is incorrect because this is based on the least amount of rights needed to perform their jobs and not based on what is contained in the database. ownership-based access control. Is incorrect because this is based on the owner of the data and and not based on what is contained in the database.

Topics

#Access Control Models#Content-dependent access control#Database Security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice