Thursday, May 5, 2016

Using Security Labels

Are you familiar with how Security labels can be used to control access to data? If you're planning on taking the Security+ exam, it's something you might like to review. For example, can you answer this sample practice test question?

Q. A security administrator needs to implement an access control system that will protect data based on the following matrix.

Document TypeSecurity LevelSecurity Label
Employment documentsConfidentialEmployee
Salary and Compensation DocumentsConfidentialPayroll
Internal phone listing documentsConfidentialEmployee

(Note that this matrix only represents a subset of the overall requirements).

Which of the following choices would be the BEST solution to meet this requirement?
A. DAC
B. Trusted OS
C. Role-BAC
D. SCADA