Certified Information Systems Security Professional (CISSP) — Question 27

Which of the following system components enforces access controls on an object?

Answer options

• A. Security perimeter
• B. Access control matrix
• C. Trusted domain
• D. Reference monitor

Correct answer: D

Explanation

The Reference Monitor is a key component that enforces access controls by mediating all access requests to objects. The other options, while related to security, do not perform the direct enforcement of access controls; for instance, the Security perimeter defines boundaries but doesn't enforce policies, and the Access control matrix is a theoretical model rather than a functional component.