200-201: Understanding Cisco Cybersecurity Operations Fundamentals

By Cisco · Question Mode

QuestionQ22

Security Policies and Procedures

A security consultant needs to change the organization’s identity and access management model. The new approach will place responsibility with the owner, who will determine which users can access which resources. Which low-cost model must be used for this purpose?

Explanation

Discretionary access control lets the owner of a resource decide which users receive access. Its direct, owner-managed permission model is generally easier and less costly to maintain than centrally administered mandatory access control.

Community Discussion

No comments yet. Be the first to start the discussion!