Certified Information Systems Security Professional (CISSP) — Question 16

Which of the following is a unique feature of attribute-based access control (ABAC)?

Answer options

• A. A user is granted access to a system at a particular time of day.
• B. A user is granted access to a system based on username and password.
• C. A user is granted access to a system based on group affinity.
• D. A user is granted access to a system with biometric authentication.

Correct answer: A

Explanation

The correct answer, A, highlights that ABAC involves access rights determined by specific attributes, such as time of day. The other options describe various access control methods, such as traditional username/password authentication, group-based access, and biometric systems, which do not embody the attribute-based nature of ABAC.