Sebastian is trying to access a resource that has been labeled as top secret, but he only has secret clearance. Which of the following access control methods does his organization use?
A) Role-based access control
B) Mandatory access control
C) Discretionary access control
D) Classification-based access control

Question

Quizplus · Accepted Answer

Mandatory access control (MAC) is a model that uses predefined security labels (e.g., top secret, secret) to determine access rights. The system enforces access policies based on these labels, not allowing users to access information unless their clearance level matches or exceeds the required level for the resource. Since Sebastian cannot access a top secret resource with only a secret clearance, this scenario exemplifies mandatory access control.

Sebastian Is Trying to Access a Resource That Has Been