A subject can exercise only accesses for which it has the necessary
authorization and which satisfy the MAC rules.

Question

Quizplus · Accepted Answer

This statement accurately describes the principles of a Mandatory Access Control (MAC) system. In MAC, each subject is given a security clearance or label that determines their level of authorization to access objects within the system. The MAC rules specify how labels can interact with each other, preventing subjects from accessing objects that they are not authorized to access. Therefore, a subject can only exercise accesses for which it has the necessary authorization and which satisfy the MAC rules.

A Subject Can Exercise Only Accesses for Which It Has