CISSP – Information Systems Security Architecture Professional (ISSAP) — Question 71

Which of the following decides access control on an object in the mandatory access control (MAC) environment?

Answer options

• A. Sensitivity label
• B. Event log
• C. System Access Control List (SACL)
• D. Security log

Correct answer: A

Explanation

The correct answer is A, as the sensitivity label is crucial in a MAC environment to define the access rights based on classification levels. Options B, C, and D do not influence access control directly; instead, they serve purposes such as logging events or managing permissions rather than defining access levels.