Certified Secure Software Lifecycle Professional (CSSLP) — Question 89

Which of the following access control models uses a predefined set of access privileges for an object of a system?

Answer options

• A. Role-Based Access Control
• B. Discretionary Access Control
• C. Policy Access Control
• D. Mandatory Access Control

Correct answer: B, D, A, C, A

Explanation

The correct answer is B, Discretionary Access Control, as it allows users to manage access rights for their own resources based on predefined permissions. The other options, such as D (Mandatory Access Control), impose strict policies that do not allow users to modify access rights, while A (Role-Based Access Control) assigns permissions based on roles rather than a predefined set of privileges.