This question-specific review guide is tied to the answer reasoning for a PracticeTestVault item. Use it after you answer the question so the review stays focused on what the prompt actually tested.
What this question is testing
Objective: Understand access control models
Prompt focus: In which access control model are access decisions based on labels assigned to subjects and objects and enforced by the system rather than by data owners?
Why the correct answer works
Mandatory Access Control
Mandatory Access Control bases decisions on system-enforced labels rather than owner discretion.
Why the tempting wrong answer fails
Incorrect. Role-Based Access Control assigns permissions through job roles, not labels.
Plain-language takeaway
Mandatory Access Control uses security labels such as classification and clearance levels. The system enforces access centrally, and individual owners cannot override the policy.
Simple analogy
Think of understand access control models like following a short checklist: identify the clue, confirm the rule, and then make the move that fits this exact scenario.
How to review it before a retake
- Underline the command word and name what the question is asking before rereading the choices.
- Compare the correct answer against the closest distractor and write the exact detail that separates them.
- Retest this objective with a fresh question without looking at the rationale first.