CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ175

VerifiedIdentity and Access Management (IAM)

Which of the following factors should be considered characteristics of Attribute-Based Access Control (ABAC) with respect to the attributes used?

Explanation

ABAC authorizes access by evaluating relevant attributes against policy rules. Its attribute-driven policies can enforce both discretionary access control (DAC) and mandatory access control (MAC) concepts; neither RBAC nor access control lists (ACLs) is the required pair stated for ABAC’s capabilities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!