CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ143

VerifiedIdentity and Access Management (IAM)

Which access-control type uses a system that permits access to employee records only for users whose type=managers and department=sales?

Explanation

Attribute-based access control (ABAC) grants or denies access by evaluating attributes associated with the requesting subject against policy rules. The requirements type=managers and department=sales are subject attributes that must both satisfy the policy for access to employee records.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!