Which of the following is NOT a valid access control mechanism?
A.
DAC (Discretionary Access Control) list.
B.
RAC (Restrictive Access Control) list.
C.
MAC (Mandatory Access Control) list.
D.
RBAC (Role Based Access Control) list.
Explanation:
The three basic access control mechanisms are MAC (Mandatory Access Control), DAC
(Discretionary Access Control) and RBAC (Role Based Access Control). There is no RAC
(Restrictive Access Control) list.
Incorrect Answers:
A: The three basic access control mechanisms are MAC (Mandatory Access Control), DAC
(Discretionary Access Control) and RBAC (Role Based Access Control). DAC is based on the
owner of the resource allowing other users access to that resource.
C: The three basic access control mechanisms are MAC (Mandatory Access Control), DAC
(Discretionary Access Control) and RBAC (Role Based Access Control). MAC is based on
predefined access privileges to a resource.
D: The three basic access control mechanisms are MAC (Mandatory Access Control), DAC
(Discretionary Access Control) and RBAC (Role Based Access Control). RBAC is based on the
role or responsibilities users have in the organization.Reference:Michael Cross, Norris L. Johnson,
Jr. and Tony Piltzecker, Security+ Study Guide and DVD Training System, Rockland, MA,
Syngress, 2002, pp. 8-10.Mike Pastore and Emmett Dulaney, Security+ Study Guide, 2nd Edition,
Alameda, Sybex, 2004, p. 13.