Access Control

A project manager creates a shared folder and decides which team members can read or edit files. Which access control model is this?

Discretionary Access Control (DAC)

A government agency assigns data classification labels and only users with the right clearance can open certain documents. Which access control model is this?

Mandatory Access Control (MAC)

A hospital’s HR system gives doctors different permissions from nurses, based on their job function. Which access control model is this?

Role-Based Access Control (RBAC)

A cloud service allows login only if the user is in the “Finance” department, is on the corporate network, and is accessing during business hours. Which access control model is this?

Attribute-Based Access Control (ABAC)

A company’s system automatically revokes a user’s access when they transfer to another department. Which type of control or process is this?

Dynamic Access Control (DAC with automatic enforcement)

Two employees must both use their keys to open a secure vault at the same time. What security principle is this?

Two-Person Control

A bank requires two separate people to approve a high-value transaction. What security concept is being applied?

Separation of Duties

An administrator assigns permissions to a “Help Desk” role, then adds new hires to that role so they inherit the permissions. What access control model is this?

Role-Based Access Control (RBAC)

A system checks if a user is logging in from their usual location and blocks access if the location is suspicious. What access concept is this?

Context-aware or Attribute-Based Access Control (ABAC)

A company uses a fingerprint reader to log in to its internal application. What type of access control is this?

Logical (technical) access control using biometric authentication

A security guard checks IDs before letting visitors into a server room. What type of access control is this?

Physical access control

A file owner grants another employee permission to read but not edit a document. What access control model is this?

Discretionary Access Control (DAC)

Access to a nuclear control panel is restricted to users with “Top Secret” clearance, regardless of their job title. What access control model is this?

Mandatory Access Control (MAC)

A university grants access to its library database only to current students, verified by their enrollment status. What access control model is this?

Attribute-Based Access Control (ABAC)

An IT admin creates a “Network Admin” role with permissions to change firewall rules and assigns it to senior engineers. What access control model is this?

Role-Based Access Control (RBAC)