PrepAway - Latest Free Exam Questions & Answers

What security model is dependent on security labels?

What security model is dependent on security labels?

PrepAway - Latest Free Exam Questions & Answers

A.
Discretionary access control

B.
Label-based access control

C.
Mandatory access control

D.
Non-discretionary access control

Explanation:
Mandatory Access Control begins with security labels assigned to all resource objects on the system. These
security labels contain two pieces of information – a classification (top secret, confidential etc.) and a category
(which is essentially an indication of the management level, department or project to which the object is
available).
Similarly, each user account on the system also has classification and category properties from the same set of
properties applied to the resource objects. When a user attempts to access a resource under Mandatory
Access Control the operating system checks the user’s classification and categories and compares them to the
properties of the object’s security label. If the user’s credentials match the MAC security label properties of the
object access is allowed. It is important to note that both the classification and categories must match. A user
with top secret classification, for example, cannot access a resource if they are not also a member of one of the
required categories for that object.
Incorrect Answers:
A: Discretionary access control is not dependent on security labels.
B: Label-based access control is not one of the defined access control types.
D: Non-discretionary access control is not dependent on security labels.

http://www.techotopia.com/index.php/Mandatory,_Discretionary,_Role_and_Rule_Based_Access_Control


Leave a Reply