Question 9 (practice exam 7)

  1. Q: What does the acronym "MAC" stand for in the context of access control models? A: MAC stands for Mandatory Access Control.

  2. Q: What is the primary characteristic of the Mandatory Access Control (MAC) model? A: In the MAC model, all access must be predefined based on system classification, configuration, and authentication.

  3. Q: In what types of environments is the Mandatory Access Control (MAC) model commonly used? A: MAC is commonly used in highly centralized environments.

  4. Q: What does the MAC model typically rely on to enforce access control? A: The MAC model usually relies on a series of labels, such as classification levels of the data.

  5. Q: How does the Mandatory Access Control (MAC) model differ from the Role-Based Access Control (RBAC) model? A: In the MAC model, access is predefined based on system classification and configuration, while in the RBAC model, access is determined by the user's assigned role within the organization.

  6. Q: What is the purpose of the Attribute-Based Access Control (ABAC) model? A: The ABAC model determines access based on attributes associated with the user, the resource, and the environment.

  7. Q: In the context of access control models, what is the primary advantage of using the Mandatory Access Control (MAC) model in highly centralized environments? A: The MAC model provides a highly controlled and centralized approach to access control, making it suitable for environments where strict enforcement of predefined access rules is required based on data classification levels.