Identity-based access control is a subset of which one of the following
access control categories?
A.
Discretionary access control
B.
Lattice-based access control
C.
Non-discretionary access control
D.
Mandatory access control
Explanation:
The correct answer is “Discretionary access control”. Identity-based access control is a type of
discretionary access control that grants access privileges based on
the user’s identity. A related type of discretionary access control is
user-directed access control that gives the user, with certain
limitations, the right to alter the access control to certain objects.