nerdexam
CompTIA

SY0-301 · Question #138

Which of the following presents the STRONGEST access control?

The correct answer is A. MAC. MAC (Mandatory Access Control) is the strongest access control model because labels and clearances are enforced by the operating system and cannot be modified by individual users. TACACS is an authentication protocol, not an access control model.

General security concepts

Question

Which of the following presents the STRONGEST access control?

Options

  • AMAC
  • BTACACS
  • CDAC
  • DRBAC

How the community answered

(30 responses)
  • A
    90% (27)
  • B
    7% (2)
  • D
    3% (1)

Why each option

MAC (Mandatory Access Control) is the strongest access control model because labels and clearances are enforced by the operating system and cannot be modified by individual users. TACACS is an authentication protocol, not an access control model.

AMACCorrect

MAC enforces access based on security labels (such as classifications) assigned to subjects and objects by the system, and individual users have no ability to override or delegate these permissions - only administrators and the OS enforce them. This makes MAC the strongest model as it removes discretion from users entirely, preventing privilege abuse or accidental permission grants.

BTACACS

TACACS (Terminal Access Controller Access Control System) is an authentication and authorization protocol for network device access, not a general access control model comparable to MAC, DAC, or RBAC.

CDAC

DAC (Discretionary Access Control) allows resource owners to set permissions at their discretion, making it weaker than MAC because users can inadvertently or intentionally grant excessive access.

DRBAC

RBAC (Role-Based Access Control) assigns permissions based on job roles and is more flexible than MAC but less strict, as roles can be broadly defined and users may accumulate permissions across multiple roles.

Concept tested: Comparing access control models - MAC vs DAC vs RBAC

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/access-control

Topics

#MAC#DAC#RBAC#access control models

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice