SSCP: Systems Security Certified PractitionerDemo

By ISC · Question Mode

QuestionQ904

Access Controls

Which type of access control uses a central authority to determine which objects subjects may access, based on roles or the organization’s security policy?

  • A Mandatory Access Control
  • B Discretionary Access Control
  • C Non-Discretionary Access Control
  • D Rule-based Access control
Explanation

Non-discretionary access control is centrally administered and assigns access according to organizational roles or defined security policies, rather than allowing individual object owners to make access decisions.

Community Discussion

No comments yet. Be the first to start the discussion!