Access Control Principles, Terminologies, and Models NDE Practice Questions (Page 5)

Questions 21–22

1. 21expert · hard

   A healthcare provider must ensure that patient records are only accessible to authorized medical staff. The system must also log every access attempt for compliance. The provider is considering implementing MAC. Which trade-off should the provider consider?

   • AMAC provides strong central enforcement but may be inflexible for emergency access scenarios
   • BMAC is the best model for all access control needs
   • CMAC allows users to grant access to others, which simplifies sharing
   • DMAC requires no administrative overhead because it is self-managing
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which access control principle ensures that data is not altered or destroyed by unauthorized parties?

   • AAuthentication
   • BConfidentiality
   • CAvailability
   • DIntegrity
   Reveal Solution Discussion Select an answer first