- Home
- All questions
- Question 321
CompTIA Security+ study material · question 321 of 611
NIST describes access control lists and role-based access control as narrow cases of the attribute model. Which attribute does each key off?
Show the answer
Answer: B. An ACL keys off identity and RBAC off role
ABAC generalises both by allowing rules over many attributes rather than one.
Source: NIST SP 800-162 (NIST) — SP 800-162 § 2.1