CompTIA Security+ (SY0-501) — Question 171

When configuring settings in a mandatory access control environment, which of the following specifies the subjects that can access specific data objects?

Answer options

• A. Owner
• B. System
• C. Administrator
• D. User

Correct answer: C

Explanation

The correct answer is C, as the Administrator is responsible for setting access controls and permissions in a mandatory access control environment. The Owner may have some say, but it is the Administrator who ultimately defines access policies. The System itself does not decide access, and Users are typically the subjects trying to gain access rather than defining it.