Which of the following would be used to implement Mandatory Access Control (MAC)?
A.
Clark-Wilson Access Control
B.
Role-based access control
C.
Lattice-based access control
D.
User dictated access control
Explanation:
A lattice is a mathematical construct that is built upon the notion of a group. The most common definition of the
lattice model is “a structure consisting of a finite partially ordered set together with least upper and greatest
lower bound operators on the set.”
Two methods are commonly used for applying mandatory access control:
Rule-based (or label-based) access control: This type of control further defines specific conditions for
access to a requested object. A Mandatory Access Control system implements a simple form of rule-based
access control to determine whether access should be granted or denied by matching:
– An object’s sensitivity label
– A subject’s sensitivity label
Lattice-based access control: These can be used for complex access control decisions involving multiple
objects and/or subjects. A lattice model is a mathematical structure that defines greatest lower-bound and
least upper-bound values for a pair of elements, such as a subject and an object.
Incorrect Answers:
A: Clark-Wilson Access Control is not used to implement Mandatory Access Control (MAC).
B: Role-based Access Control is not used to implement Mandatory Access Control (MAC).
D: User dictated Access Control is not used to implement Mandatory Access Control (MAC).https://en.wikipedia.org/wiki/Computer_access_control