SSCP · Question #91
Which access control model provides upper and lower bounds of access capabilities for a subject?
The correct answer is B. Lattice-based access control. Lattice-based access control defines a mathematical lattice structure that establishes upper bounds (maximum access level permitted) and lower bounds (minimum access level) for each subject-object pair. It formalizes the relationship between security labels and ensures that…
Question
Which access control model provides upper and lower bounds of access capabilities for a subject?
Options
- ARole-based access control
- BLattice-based access control
- CBiba access control
- DContent-dependent access control
How the community answered
(37 responses)- A8% (3)
- B86% (32)
- C3% (1)
- D3% (1)
Explanation
Lattice-based access control defines a mathematical lattice structure that establishes upper bounds (maximum access level permitted) and lower bounds (minimum access level) for each subject-object pair. It formalizes the relationship between security labels and ensures that access decisions respect the lattice ordering. RBAC assigns roles without defining bounding constraints, Biba is an integrity model focused on preventing data corruption, and content-dependent access control bases decisions on the data content itself.
Topics
Community Discussion
No community discussion yet for this question.