Which of the following access control types gives “UPDATE” privileges on Structured Query Language
(SQL) database objects to specific users or groups?

A.
Supplemental

B.
Discretionary

C.
Mandatory

D.
System

Explanation:
Supplemental and System are not access control types. The most correct answer is mandatory
opposed to discretionary. The descriptions below sound typical of how a sql accounting database
controls access. “In a mandatory access control (MAC) model, users and data owners do not have as
much freedom to determine who can access their files. Data owners can allow others to have access
to their files, but it is the operating system that will make the final decision and can override the
data owner’s wishes.” Pg. 154 Shon Harris CISSP All-In-One Certification Exam Guide “Rule-based
access controls are a variation of mandatory access controls. A rule based systems uses a set of
rules, restrictions or filters to determine what can and cannot occur on the system, such as granting
subject access, performing an action on an object, or accessing a resource. Pg 16 Tittle: CISSP Study
Guide.