GIAC GCIH Exam - Topic 6 Question 28 Discussion

Actual exam question for GIAC's GCIH exam

Question #: 28
Topic #: 6

Which of the following controls is described in the statement given below?

"It ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at."

ARole-based Access Control

BAttribute-based Access Control

CDiscretionary Access Control

DMandatory Access Control

Show Suggested Answer

Suggested Answer: B

by Kanisha at Sep 14, 2024, 02:10 AM

Limited Time Offer

25%

Off

Get Premium GCIH Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Johnetta

6 months ago

Mandatory Access Control? Really? That seems strict!

upvoted 0 times

...

Allene

6 months ago

Wait, are we sure it's not Role-based Access Control?

upvoted 0 times

...

Refugia

6 months ago

I think it's Attribute-based Access Control.

upvoted 0 times

...

Glendora

7 months ago

Definitely not Discretionary Access Control!

upvoted 0 times

...

Carlee

7 months ago

Sounds like Mandatory Access Control to me.

upvoted 0 times

...

Joesph

7 months ago

I lean towards Mandatory Access Control because of the emphasis on sensitivity labels and strict enforcement, but I could be wrong.

upvoted 0 times

...

Suzan

7 months ago

This sounds familiar, I practiced a question like this before. I feel like the answer could be Attribute-based Access Control, but I'm not confident.

upvoted 0 times

...

Eileen

8 months ago

I'm not entirely sure, but I remember something about Role-based Access Control focusing on user roles. This seems different.

upvoted 0 times

...

Erinn

8 months ago

I think this might be related to Mandatory Access Control since it mentions enforcing policies rather than relying on user compliance.

upvoted 0 times

...

Carmen

8 months ago

This is a tough one, but I'm leaning towards Mandatory Access Control. The part about not relying on voluntary user compliance seems key.

upvoted 0 times

...

Arminda

8 months ago

I'm a bit confused by the wording here. It doesn't seem to fit perfectly with any of the options. I'll have to weigh the details carefully.

upvoted 0 times

...

Leonora

8 months ago

Okay, the description mentions something about sensitivity labels and comparing to the user's security level. That sounds like Mandatory Access Control to me.

upvoted 0 times

...

Annamaria

8 months ago

Hmm, this one seems tricky. I'll need to carefully read through the details and think about the key characteristics of each access control model.

upvoted 0 times

...

Leanna

8 months ago

I think Attribute-based Access Control is the best fit based on the information provided. It talks about assigning sensitivity labels, which aligns with that model.

upvoted 0 times

...

Odette

8 months ago

Okay, I've got this. The question says the port security is already enabled, so we just need the next step to allow the port to learn the printer's MAC address. That sounds like option C - enable sticky MAC addressing. I'm confident that's the right answer.

upvoted 0 times

...

Flo

1 year ago

Mandatory access control, huh? Sounds like someone's trying to keep a tight grip on their information. Better not try any of that 'discretionary' business here!

upvoted 0 times

Katina

12 months ago

D) Mandatory Access Control

upvoted 0 times

...

Wenona

12 months ago

C) Discretionary Access Control

upvoted 0 times

...

Dorathy

1 year ago

B) Attribute-based Access Control

upvoted 0 times

...

Bulah

1 year ago

A) Role-based Access Control

upvoted 0 times

...

Anglea

1 year ago

Mandatory access control, eh? I guess the developers of this exam are feeling a bit 'mandatory' today. Gotta love these security-themed brain teasers!

upvoted 0 times

Carlene

1 year ago

B) Attribute-based Access Control

upvoted 0 times

...

Antonette

1 year ago

A) Role-based Access Control

upvoted 0 times

...

Danilo

1 year ago

Really? Mandatory access control? I was thinking it might be role-based, but the part about not relying on user compliance makes me think D is the right answer. Tricky question!

upvoted 0 times

...

Omega

1 year ago

I'm going to have to go with option D on this one. Mandatory access control is the only choice that matches the criteria given in the question.

upvoted 0 times

Michael

1 year ago

Yes, Mandatory Access Control is the control that fits the description given.

upvoted 0 times

...

Bobbie

1 year ago

I think option D is the best fit for the description provided.

upvoted 0 times

...

Basilia

1 year ago

Mandatory Access Control is definitely the right control for this scenario.

upvoted 0 times

...

Ruth

1 year ago

I agree, option D - Mandatory Access Control, is the correct choice.

upvoted 0 times

...

Frederica

1 year ago

I'm not sure, but I think it could also be B) Attribute-based Access Control. It assigns sensitivity labels like the description mentions.

upvoted 0 times

...

Chandra

1 year ago

Hmm, this sounds like mandatory access control to me. The description about assigning sensitivity labels and comparing to user security levels is a dead giveaway.

upvoted 0 times

...

Loise

1 year ago

I agree with Bettyann. Mandatory Access Control makes sense based on the description.

upvoted 0 times

...

Bettyann

1 year ago

I think the answer is D) Mandatory Access Control.

upvoted 0 times

...