Which access control model uses security labels and clearances to govern access?

Which access control model uses security labels and clearances to govern access?

• A. MAC describes access based on security labels and clearances.
• B. DAC describes access controlled by data owner.
• C. RBAC describes access by role.
• D. ABAC describes access by attributes.

Answer: (A)

Access decisions are driven by fixed security labels and user clearances. In this model, objects carry a security label (for example, a level like Top Secret, Secret, or Confidential and possibly compartment codes), while subjects have a corresponding clearance. The system enforces a policy that only allows access when the subject’s clearance is at least as high as the object's label and any required compartments are satisfied. This enforcement is mandatory, meaning access isn’t granted or revoked by individual owners or users but by the system policy itself. This distinguishes it from other models: in discretionary access control, data owners control permissions; in role-based access control, access is tied to assigned roles; in attribute-based access control, access depends on various attributes of the user, resource, and environment.

Access decisions are driven by fixed security labels and user clearances. In this model, objects carry a security label (for example, a level like Top Secret, Secret, or Confidential and possibly compartment codes), while subjects have a corresponding clearance. The system enforces a policy that only allows access when the subject’s clearance is at least as high as the object's label and any required compartments are satisfied. This enforcement is mandatory, meaning access isn’t granted or revoked by individual owners or users but by the system policy itself.

This distinguishes it from other models: in discretionary access control, data owners control permissions; in role-based access control, access is tied to assigned roles; in attribute-based access control, access depends on various attributes of the user, resource, and environment.