Study. uk . com
  1. Home
  2. All questions
  3. Question 344

CISSP study material · question 344 of 500

A document is owned by one organisation but includes a section carrying another organisation's intellectual property. What does NIST SP 800-162 say about attributes in such a case?

  1. Part-level attributes are treated as environment conditions instead.
  2. Some attributes describe the whole object while others apply only to parts of it.
  3. Only the owner attribute is evaluated; part-level attributes are ignored.
  4. The document must be split so that each part has one owner.
Show the answer

Answer: B. Some attributes describe the whole object while others apply only to parts of it.

SP 800-162 states some attributes pertain to the entire instance of an object, such as the owner, while others may apply only to parts of it, giving exactly this example.

Source: NIST SP 800-162 (NIST) — SP 800-162 > 2.3 Basic ABAC Concepts

Challenge yourself on this topic → Study as cards