Access Control Models

Question 1

What is Mandatory Access Control (MAC)?

Answer 1

The system controls access with fixed rules.

Example sentence: In MAC systems, access to files is determined by the system, not the user.

Question 2

What is Discretionary Access Control (DAC)?

Answer 2

The resource owner decides who gets access.

Additional information: DAC allows users to control access to their own resources.

Question 3

What is Role-Based Access Control (RBAC)?

Answer 3

Access is granted based on a user’s role.

Example sentence: In RBAC, users are assigned roles such as ‘admin’ or ‘guest’ to determine their access rights.

Question 4

What is Attribute-Based Access Control (ABAC)?

Answer 4

Access is based on user attributes like department or location.

Additional information: ABAC policies evaluate attributes like job title or security clearance to determine access.