Tools / Cyber Security Interview Questions
What are the types of Access Control models?
Access control models define who can decide, and how, whether a user is allowed to reach a resource.
| Model | How access is granted |
| DAC (Discretionary Access Control) | The resource owner decides who gets access |
| MAC (Mandatory Access Control) | A central authority assigns access based on classification labels |
| RBAC (Role-Based Access Control) | Access is granted based on a user's assigned role |
| ABAC (Attribute-Based Access Control) | Access is granted based on attributes like department, location, or time of day |
Most enterprise applications default to RBAC because it's easier to manage at scale than assigning permissions individually, while government systems often rely on MAC for stricter, label-based enforcement.
In DAC, who decides who gets access to a resource?
Which model grants access based on assigned organizational roles?
More Related questions...
