SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ470

Access Controls

What is best described as an abstract machine that must mediate every access by subjects to objects?

  • A A security domain
  • B The reference monitor
  • C The security kernel
  • D The security perimeter
Explanation

A reference monitor is an abstract access-control mechanism that mediates all subject-to-object access requests and enforces the system’s security policy.

Community Discussion

No comments yet. Be the first to start the discussion!