Question 18 (practice exam 7)

  1. Q: What does the acronym "ABAC" stand for in the context of access control models? A: ABAC stands for Attribute-Based Access Control.

  2. Q: What is the primary distinguishing feature of the ABAC model? A: The ABAC model makes access decisions based on a combination of subject attributes, object attributes, and context-sensitive or system-wide attributes.

  3. Q: In an ABAC model, what types of attributes might be considered when granting or denying access to a resource? A: Attributes that could be considered in an ABAC model include the user's group membership, the operating system being used, the IP address of the machine, and other context-sensitive or system-wide attributes.

  4. Q: How does the granularity of access control in the ABAC model compare to other models like RBAC or MAC? A: The ABAC model provides a more detailed and explicit level of access control by considering a broader range of attributes, making it more granular than models like RBAC or MAC.

  5. Q: What is a potential advantage of using an ABAC model in environments with diverse and dynamic access requirements? A: The ABAC model's ability to consider a wide range of attributes makes it well-suited for environments with diverse and dynamic access requirements, as it can adapt to changing contexts and scenarios.

  6. Q: In the context of the Principle of Least Privilege, how can the ABAC model contribute to a more secure access control implementation? A: By considering various attributes, the ABAC model can enforce more granular access controls, aligning with the Principle of Least Privilege by granting only the necessary access based on the specific context and attributes.

  7. Q: While the ABAC model offers granular access control, what is a potential challenge that organizations may face when implementing it? A: Implementing an ABAC model can be complex, as it requires defining and managing a potentially large number of attributes and access rules, which can increase the administrative overhead and complexity of the access control system.