CISSP: Lattice-based. Lattice-based access controls provide upper and lower bounds of access for a subject pertaining to a specific object. When a subject makes an access attempt, the system will first check if it is allowed, and then determine the range of access the subject actually has. A subject may be able to "read" but not "write" to that object, thus "write" is outside of its lattice bounds.

Question

Lattice-based. Lattice-based access controls provide upper and lower bounds of access for a subject pertaining to a specific object. When a subject makes an access attempt, the system will first check if it is allowed, and then determine the range of access the subject actually has. A subject may be able to "read" but not "write" to that object, thus "write" is outside of its lattice bounds.

John Intindolo · Accepted Answer

Access controls that give subjects and objects a range of upper and lower bound capabilities are called __________________.
- Security labels
- Lattice-based
- Mandatory
- Task-based

CISSP

Access controls that give subjects and objects a range of upper and lower bound capabilities are called __________________. - Security labels - Lattice-based - Mandatory - Task-based

Autor