2 cissp ® Official Study Guide Eighth Edition

B.
Enforce the least restrictive rights required by users to run system processes.
C.
Enforce the most restrictive rights required by users to complete assigned tasks.
D.
Enforce the least restrictive rights required by users to complete assigned tasks.
3.
A table includes multiple objects and subjects and it identifies the specific access each sub-
ject has to different objects. What is this table?
A.
Access control list
B.
Access control matrix
C.
Federation
D.
Creeping privilege
4.
Who, or what, grants permissions to users in a DAC model?
A.
Administrators
B.
Access control list
C.
Assigned labels
D.
The data custodian
5.
Which of the following models is also known as an identity-based access control model?
A.
DAC
B.
RBAC
C.
Rule-based access control
D.
MAC
6.
A central authority determines which files a user can access. Which of the following best 
describes this?
A.
An access control list (ACL)
B.
An access control matrix
C.
Discretionary Access Control model
D.
Nondiscretionary access control model

---

658
Chapter 14 
■
Controlling and Monitoring Access
7.
A central authority determines which files a user can access based on the organization’s 
hierarchy. Which of the following best describes this?
A.
DAC model
B.
An access control list (ACL)
C.
Rule-based access control model
D.
RBAC model
8.
Which of the following statements is true related to the RBAC model?