Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 16

What can be defined as a table of subjects and objects indicating what actions individual subjects can take upon individual objects?

A. a capacity table

B. an access control list

C. an access control matrix

D. a capability table

Step 1 of 2

Subjects and objects

An Access Control Matrix is a security model that defines the rights of each subject associated with the individual object in the system.

Hence, the correct option is C. an access control matrix.