The Official (ISC)2 Guide to the SSCP CBK, 3rd Edition

Appendix A Answers to Sample Questions

Domain 1: Access Controls

1. What type of controls are used in a rule set based access control system?

   1. Discretionary
   2. Mandatory
   3. Role based
   4. Compensating

   Answer: A

   Rule set based access controls (RSBAC) are discretionary controls giving data owners the discretion to determine the rules necessary to facilitate access.

2. What framework is the rule set based access controls logic based upon?

   1. Logical framework for access control
   2. Specialized framework for access control
   3. Technical framework for access control
   4. Generalized framework for access control

   Answer: D

   The RSBAC framework logic is based on the work done for the generalized framework for access control (GFAC) by Abrams and LaPadula.

3. View based access ...