CISSP-ISSAP: Information Systems Security Architecture Professional

By ISC · Question Mode

QuestionQ71

VerifiedIdentity and Access Management (IAM) Architecture

Under which of the following access control models is a user unable to grant other users permission to view a received copy of an object marked secret unless those users have the appropriate permissions?

Explanation

Mandatory Access Control (MAC) applies centrally enforced security labels and authorization rules. A user who receives a secret object cannot delegate access at their discretion; any other user must independently meet the required authorization or clearance conditions.

Community Discussion

No comments yet. Be the first to start the discussion!