Exam SSCP topic 1 question 21 discussion

A is the correct answer, because the question is asking about an action control mechanism (read, tool or method to execute a principal) NOT a principal or accepted ideology preference. In this case, "least privilege" could be argued for all these access controls, but A is the best fit answer to this scenario purely on how this is worded. Keep that in mind when taking the exam, good luck!

Context-dependent access control means that the access granted to a user depends on the specific context in which they are accessing the data. In this case, the context is the department the user is viewing. Access to employee salaries is granted only when the user is viewing data for their own department.

(A) Content-dependent access control means: Access to data is based on the actual content of the data itself, rather than just the user's identity or role. In this case: The manager is only allowed to view salary data if the employee's department matches their own. The system evaluates the value inside the “department” field of each data record to decide whether access is allowed.

The content is salaries, so if it were content dependent the manager would not see any salaries. Least privilege would allow the manger to see things in his department while blocking other department information.

The answer is C. The manager has the least amount of access needed to do their job.

Correct answer is A

CDAC is a subset of database views which falls under the principle of least privilege. The principle of least privilege gives the subject as little control and access as possible while being able to efficiently execute work.