Study. uk . com
  1. Home
  2. All questions
  3. Question 341

CompTIA Security+ study material · question 341 of 611

Which control governs where data may travel between systems and domains, as distinct from whether a subject may read an object?

  1. Separation of duties
  2. Least privilege
  3. Information flow enforcement
  4. Access enforcement
Show the answer

Answer: C. Information flow enforcement

A subject may legitimately read data and still not be permitted to move it into another domain.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › AC-4 Information Flow Enforcement

Challenge yourself on this topic → Study as cards