In Mandatory Access Control, sensitivity labels attached to object contain what information?

Question

Options

• AThe item's classification
• BThe item's classification and category set
• CThe item's category
• DThe items's need to know

• A
  3% (1)
• B
  95% (35)
• D
  3% (1)

Explanation

In Mandatory Access Control, sensitivity labels on objects contain both a classification level (e.g., Top Secret, Secret, Unclassified) and a category set (compartments like "NATO" or "Project X"), which together define the full access requirements - making B correct.

Why the distractors fail:

• A (classification only) is incomplete - classification alone cannot enforce compartmentalization; you'd miss the "need to know" compartment dimension.
• C (category only) is the other half of the same problem - categories without a classification level provide no hierarchical access control.
• D (need to know) confuses a policy concept (the principle that users should only access what their job requires) with the actual data structure stored in a label.

Memory tip: Think of a sensitivity label as a two-part address - the classification is the "floor" (hierarchy), and the category set is the "room" (compartment). You need both the floor and the room number to find someone - or to grant access.

No community discussion yet for this question.