Study. uk . com
  1. Home
  2. All questions
  3. Question 52

CISSP study material · question 52 of 500

An architect replaces static group permissions on a research data platform with attribute based access control (ABAC), so that the particulars of each request decide the outcome rather than a fixed grant. Which inputs does the ABAC decision test against the rule set? Choose three.

  1. The operation the subject is requesting
  2. The role assignments the subject inherits from directory groups
  3. Attributes of the subject making the request
  4. Attributes of the object the request targets
Show the answer

Answer: C. Attributes of the subject making the request
D. Attributes of the object the request targets
A. The operation the subject is requesting

ABAC evaluates subject, object and operation attributes, sometimes with environmental conditions, against rules. Inherited directory role assignments belong to the role-based model ABAC replaces here.

Source: NIST SP 800-162 (NIST) — SP 800-162 > Abstract

Challenge yourself on this topic → Study as cards