Exam SSCP topic 1 question 61 discussion

Research.

Acces Rule, Access Matrix It's a conceptual model (not a direct implementation) that can represent access rules, but it’s not the rule itself.

I chose B, but after thinking about it, I lean towards agreeing with A. One object and one subject is (probably) an Access Rule. The Access Matrix comes in when there are multiple objects and/or subjects.

According to Gemini, it's A To control access to objects by subjects, you need to set up A. Access Rules. Here's why: Access Rules: These are specific policies that define who (subjects) can do what (actions) to which resources (objects). They are the fundamental mechanism for controlling access. Access Matrix: While an access matrix is a useful tool for visualizing and managing access relationships, it's not a mechanism for controlling access directly. It's a data structure that represents who can do what to what. Identification controls: These are used to verify the identity of subjects (e.g., through usernames and passwords). They are important for ensuring that only authorized subjects can access resources, but they don't directly control access. Access terminal: This is a physical device used to access a system. It's not a mechanism for controlling access. Therefore, the correct answer is A. Access Rules.

Access Matrix

B. Access Matrix