Study. uk . com
  1. Home
  2. All questions
  3. Question 320

CompTIA Security+ study material · question 320 of 611

What distinguishes attribute-based access control from a permission list?

  1. It evaluates rules over subject, object and environment attributes at request time
  2. It requires every subject to be assigned a role first
  3. It stores permissions in a database rather than a file
  4. It applies only to physical access decisions
Show the answer

Answer: A. It evaluates rules over subject, object and environment attributes at request time

The decision is computed per request from attributes rather than looked up in a pre-assigned list.

Source: NIST SP 800-162 (NIST) — SP 800-162 § 2.2 ABAC Concept

Challenge yourself on this topic → Study as cards