In ________ the department has discretion over giving access to individuals, within policy standards set by higher authorities.
A) policy-based access control
B) mandatory access control
C) discretionary access control
D) delegated access control

Question

Quizplus · Accepted Answer

The statement describes discretionary access control, which gives the department or owner of the resource the ability to grant or deny access to individuals based on their own discretion within policy standards. Policy-based access control (A) is based on predefined rules and policies, while mandatory access control (B) operates on a system of labels and categories assigned by higher authorities. Delegated access control (D) refers to the delegation of access control decisions to another party, such as an external agency or third-party service provider.

In ________ the Department Has Discretion Over Giving Access to Individuals