Study. uk . com
  1. Home
  2. All questions
  3. Question 322

CompTIA Security+ study material · question 322 of 611

A new contractor needs access to project records the moment they join, without an administrator granting it. Which model supports this directly?

  1. Attribute-based access control
  2. Discretionary access control
  3. An access control list
  4. Mandatory access control
Show the answer

Answer: A. Attribute-based access control

Because rules are evaluated at request time, access can be granted without anyone pre-assigning the subject to the object.

Source: NIST SP 800-162 (NIST) — SP 800-162 § 2.2

Challenge yourself on this topic → Study as cards