Which answer BEST describes information access permissions where, unless the user is specifically given
access to certain data they are denied any access by default?

A.
Implicit Deny

B.
Explicit Deny

C.
Implied Permissions

D.
Explicit Permit

Explanation:
Implicit Deny means that a user is denied access by default. To be given access, the user must (explicitly) be
permitted access to the resource.
Incorrect Answers:
B: Explicit Deny means the user has been denied access to the data. It does not mean the user is denied by
default.
C: Implied Permissions does not describe information access permissions where, unless the user is specifically
given access to certain data they are denied any access by default.
D: Explicit Permit means that a user is specifically given access to the data. However, it does not mean that the
user is denied by default.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 205