Which of the following access control models uses a predefined set of access privileges for an
object of a system?
A.
Role-Based Access Control
B.
Discretionary Access Control
C.
Policy Access Control
D.
Mandatory Access Control
Explanation:
Mandatory Access Control (MAC) is a model that uses a predefined set of access
privileges for an object of the system. Access to an object is restricted on the basis of the
sensitivity of the object and granted through authorization. Sensitivity of an object is defined by the
label assigned to it. For example, if a user receives a copy of an object that is marked as “secret”,
he cannot grant permission to other users to see this object unless they have the appropriate
control (RBAC) is an access control model. In this model, a user can access resources according
to his role in the organization. For example, a backup administrator is responsible for taking
backups of important data. Therefore, he is only authorized to access this data for backing it up.
However, sometimes users with different roles need to access the same resources. This situation
control model as Policy Access Control.