Access Control Models: Predefined Set of Access Privileges for Objects | CSSLP Exam | ISC

Access Control Models: Predefined Set of Access Privileges for Objects

Question

Which of the following access control models uses a predefined set of access privileges for an object of a system?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

permission.

Answer: B is incorrect.

DAC is an access control model.

In this model, the data owner has the right to decide who can access the data.

Answer: A is.

Mandatory Access Control (MAC) is a model that uses a predefined set of access privileges for an object of the system.

Access to an object is restricted on the basis of the sensitivity of the object and granted through authorization.

Sensitivity of an object is defined by the label assigned to it.

For example, if a user receives a copy of an object that is marked as "secret", he cannot grant permission to other users to see this object unless they have the appropriate incorrect.

Role-based access control (RBAC) is an access control model.

In this model, a user can access resources according to his role in the organization.

For example, a backup administrator is responsible for taking backups of important data.

Therefore, he is only authorized to access this data for backing it up.

incorrect.

There is no such access control model as Policy Access Control.

The access control model that uses a predefined set of access privileges for an object of a system is called Mandatory Access Control (MAC).

Mandatory Access Control is a security model used in computer systems to control access to resources based on the sensitivity of the information contained within the resource and the clearance level of the user requesting access. MAC uses predefined access privileges that are assigned to objects, such as files, folders, and devices, based on their level of sensitivity or classification. These predefined access privileges are often determined by the system's administrator or security personnel.

In MAC, access to resources is determined by the system's security policy rather than by the user or owner of the resource, as is the case in Discretionary Access Control (DAC). The security policy specifies which users or groups are allowed to access a particular resource and what level of access they have. This access level may be read, write, execute, or a combination of these. The security policy also determines what actions users are allowed to perform on the resource, such as copying, deleting, or modifying it.

Role-Based Access Control (RBAC) and Policy Access Control (PAC) are other access control models that can be used to control access to resources. However, neither of these models uses a predefined set of access privileges for an object of a system, as is the case with MAC.

In RBAC, access to resources is based on the roles assigned to users, while in PAC, access is determined by policies that are created by administrators and enforced by the system. In both RBAC and PAC, access privileges are not predetermined but rather are assigned based on user roles and policy rules.

Therefore, the correct answer to the given question is D. Mandatory Access Control (MAC).