CISSP-ISSAP: Information Systems Security Architecture Professional

Question

You work as an administrator at Techraft Inc. Employees in your company create 'products' that must be assigned different access levels. You need to configure a security policy so that an employee (the producer of a product) grants access privileges, such as read, write, or alter, for that product.

Which of the following access control models would you use to accomplish this task?

Explanation

Discretionary access control (DAC) gives an object’s owner, or another authorized controller, discretion to determine who may access the object and which permissions they receive. It therefore supports a product producer granting read, write, or alter privileges.

Learn more

NIST CSRC: Discretionary access control (DAC)

CISSP-ISSAP: Information Systems Security Architecture Professional

AstroTutor

Notes

Readiness

QuestionQ76

Community Discussion