Access Control Models

Which access control model relies on assigning labels or classifications to both data and users?

• A) Mandatory Access Control (MAC).

• B) Discretionary Access Control (DAC).

• C) Role-Based Access Control (RBAC).

• D) Attribute-Based Access Control (ABAC).

In Role-Based Access Control (RBAC), what is the role of a role?

• A) Determines access rights for a specific user.

• B) Represents a specific user's identity.

• C) Defines a set of permissions.

• D) Provides encryption keys for secure access.

Which access control method allows users to control access to their own resources and decide who can access them?

• A) Mandatory Access Control (MAC).

• B) Discretionary Access Control (DAC).

• C) Role-Based Access Control (RBAC).

• D) Rule-Based Access Control (RuBAC).

What is a token used for in access control systems?

• A) A biometric identifier.

• B) An access badge.

• C) A physical key.

• D) A representation of a user's identity or access rights.

Which access control mechanism relies on defining rules based on attributes such as user attributes, resource attributes, and environmental conditions?

• A) Discretionary Access Control (DAC).

• B) Role-Based Access Control (RBAC).

• C) Attribute-Based Access Control (ABAC).

• D) Mandatory Access Control (MAC).

What is the primary goal of access control?

• A) To restrict unauthorized access.

• B) To ensure high-speed data transmission.

• C) To increase system complexity.

• D) To enhance system aesthetics.

Which access control model uses security labels, such as "confidential" or "top secret," to enforce access rules?

• A) Discretionary Access Control (DAC).

• B) Mandatory Access Control (MAC).

• C) Role-Based Access Control (RBAC).

• D) Attribute-Based Access Control (ABAC).

What is the main drawback of Discretionary Access Control (DAC)?

• A) It's complex and difficult to implement.

• B) Users may assign overly permissive access rights.

• C) It doesn't offer flexibility in assigning access.

• D) It requires constant administrative intervention.

Which access control model is most suitable for dynamic environments where access rights need to be frequently updated based on changing conditions?

• A) Discretionary Access Control (DAC).

• B) Mandatory Access Control (MAC).

• C) Role-Based Access Control (RBAC).

• D) Attribute-Based Access Control (ABAC).

What is the primary objective of implementing access control in information security?

• A) Providing maximum permissions to all users.

• B) Ensuring complete data transparency.

• C) Protecting resources from unauthorized access.

• D) Allowing unrestricted access during office hours.