Study. uk . com
  1. Home
  2. All questions
  3. Question 325

CompTIA Security+ study material · question 325 of 611

Two ABAC policies produce contradictory verdicts for the same request. What must the design have addressed?

  1. Attribute encryption
  2. The control baseline's impact level
  3. Rule conflict detection and a resolution process
  4. Session timeout configuration
Show the answer

Answer: C. Rule conflict detection and a resolution process

Conflicts are a recognised ABAC design problem; the engine needs a defined way to detect and settle them.

Source: NIST SP 800-162 (NIST) — SP 800-162 § 3.1.3.7

Challenge yourself on this topic → Study as cards