Access controls that give subjects and objects a range of upper and lower bound capabilities are called:
A.
Security labels
B.
Lattice-based
C.
Mandatory
D.
Task-based
Explanation:
Lattice-based access controls provide an upper and lower bounds of
access for a subject pertaining to a specific object. When a subject makes an access
attempt, the system will first see if it is allowed, and then determine the range of
access the subject actually has. A subject maybe able to Read but not Write to that
object, thus Write is outside of its lattice bounds.