Study. uk . com
  1. Home
  2. All questions
  3. Question 342

CISSP study material · question 342 of 500

Which four inputs does an attribute based access control mechanism combine to reach a decision, according to NIST SP 800-162?

  1. The subject's role, the object's type, the requested operation and the audit policy.
  2. The subject's identity, its group memberships, the object's owner and its classification.
  3. The policy engine, the policy administrator, the enforcement point and the trust algorithm.
  4. The rules, the subject's attributes, the object's attributes and the environment conditions.
Show the answer

Answer: D. The rules, the subject's attributes, the object's attributes and the environment conditions.

SP 800-162 has the mechanism evaluate rules, subject attributes, object attributes and environment conditions to compute a decision, then enforce it.

Source: NIST SP 800-162 (NIST) — SP 800-162 > 2.3 Basic ABAC Concepts

Challenge yourself on this topic → Study as cards