Ann has read and write access to an employee database, while Joe has only read access.
Ann is leaving for a conference. Which of the following types of authorization could be
utilized to trigger write access for Joe when Ann is absent?
A.
Mandatory access control
B.
Role-based access control
C.
Discretionary access control
D.
Rule-based access control
Rule-Based Access Control (RBAC) uses the settings in preconfigured security policies to make all decisions. It is used for network devices, such as firewalls and routers, which filter traffic based on filtering rules.
Discretionary access control (DAC) allows access to be granted or restricted by an object’s owner based on user identity and on the discretion of the object owner.
Since the question did not mention anything about firewall, router, filter traffic, etc, I would assume Ann has the right to grant or restrict access. I choose C be my answer.
0
0