MENU
In which of the following mechanisms does an authority, within limitations, specify what objects can be accessed by a subject?
Suggested Answer: B
Get Premium ISSMP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In the discretionary access control, an authority, within limitations, specifies what objects can be accessed by a subject.
Answer option D is incorrect. In the mandatory access control, a subject's access to an object is dependent on labels.
Answer option A is incorrect. In the role-based access control, a central authority determines what individuals can have access to which objects based on the individual's role or title in the organization.
Answer option C is incorrect. The task-based access control is similar to role-based access control, but the controls are based on the subject's responsibilities and duties.
12 comments · newest first
MA
Margurite
11 months ago
Really? I thought Task-based Access Control was a thing.
RA
Raylene
12 months ago
I agree with Rolland, B is the correct answer!
BE
Belen
12 months ago
Wait, isn't it D? Mandatory Access Control sounds right.
EL
Elke
12 months ago
I think it's A, Role-Based Access Control fits the bill too.
RO
Rolland
1 year ago
Definitely B, Discretionary Access Control is all about that!
JU
Justine
1 year ago
Mandatory Access Control seems like a strong candidate here since it emphasizes strict rules about access, but I need to double-check the definitions.
LA
Lacey
1 year ago
Task-based Access Control sounds familiar, but I can't recall if it really involves authority specifying access. I might be mixing it up with something else.
WI
William
1 year ago
I remember studying Role-Based Access Control, but I feel like it doesn't quite fit this question. It’s more about roles than specific objects.
LE
Lera
1 year ago
I think this might be about Discretionary Access Control, but I'm not entirely sure. It seems like the authority gives some flexibility to the users.
VI
Viki
1 year ago
Okay, the OSI model - application, presentation, session, transport, network, data link, and physical. I've got this!
CA
Candra
1 year ago
I'm pretty confident I know the right answer here. Splitting application logic across multiple objects is generally better for minimizing dependencies and the impact of changes.
VA
Vanesa
1 year ago
Based on my understanding, the best option here would be to use a data extension. That way you can store multiple values for a single subscriber attribute, which is what the question is asking about. Feels like a straightforward choice to me.