CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ224

VerifiedIdentity and Access Management (IAM)

Which access control method is founded on users making access requests for system resources, features assigned to those resources, the operational or situational context, and a set of policies defined in terms of those features and context?

Explanation

Attribute-Based Access Control evaluates attributes associated with the requesting subject and the target resource, plus relevant environmental or operational conditions, against policies defined using those attributes and conditions. NIST SP 800-162 defines ABAC using these same elements.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!