Study. uk . com
  1. Home
  2. All questions
  3. Question 345

CISSP study material · question 345 of 500

Which access control framework does NIST SP 800-162 name as consistent with the attribute based access control model?

  1. The OAuth 2.0 Authorization Framework.
  2. The Security Assertion Markup Language.
  3. The Extensible Access Control Markup Language.
  4. The System for Cross-domain Identity Management.
Show the answer

Answer: C. The Extensible Access Control Markup Language.

SP 800-162 gives the Extensible Access Control Markup Language as one example of an access control framework consistent with the attribute based model.

Source: NIST SP 800-162 (NIST) — SP 800-162 > 2.2 A Working Definition of ABAC

Challenge yourself on this topic → Study as cards