Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 13

Which access control model is also called nondiscretionary access control?

A. rule-based access control

B. mandatory access control

C. role-based access control

D. label-based access control

Step 1 of 2

Nondiscretionary access control

Mandatory (Non-Discretionary) access control model is used when user’s role is strictly assigned by administrator. This is used in highly secret services such as defense. So, mandatory access control model is also called Non-Discretionary access control model.

Thus, the correct option is B. mandatory access control.