Access Control Elements with Least Upper and Greatest Lower Bounds | SSCP Exam Prep

Access Control Elements with Least Upper and Greatest Lower Bounds

Prev Question Next Question

Question

What is called the type of access control where there are pairs of elements that have the least upper bound of values and greatest lower bound of values?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

In a lattice model, there are pairs of elements that have the least upper bound of values and greatest lower bound of values.

Reference(s) used for this question: KRUTZ, Ronald L.

& VINES, Russel.

D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 34.

The type of access control where there are pairs of elements that have the least upper bound of values and greatest lower bound of values is called the Lattice model.

In the Lattice model, each element or entity in the system is assigned a security level based on its sensitivity or importance. The security levels are organized into a hierarchical structure, forming a lattice-like structure. The lattice structure allows for the classification of data and users into different security levels, which determines the type of access they have to different system resources.

The Lattice model provides the least privilege access control principle, where users are granted only the access permissions required for them to perform their tasks. Access is granted based on the security clearance of the user and the sensitivity level of the resource they want to access. The Lattice model is often used in highly secure environments such as government agencies and military organizations, where data confidentiality is of utmost importance.

In summary, the Lattice model is a type of access control model that uses a hierarchical structure to classify entities into different security levels. It provides the least privilege access control principle and is often used in highly secure environments.