Which mechanism assigns subjects to domains in an access control matrix?

Which mechanism assigns subjects to domains in an access control matrix?

• A. Central Administration
• B. RBAC
• C. Access Control Framework
• D. Domain Type Enforcement (DTE)

Answer: (D)

Domain Type Enforcement is the mechanism that assigns a subject to a domain and uses that domain to enforce permissions in an access-control matrix. In this approach, each subject (such as a process) runs within a specific domain (type), and the policy defines what actions are allowed for that domain on various object types. The association of the subject to a domain determines which row of the access-control matrix applies, so the domain effectively governs all access decisions for that subject. This mapping and enforcement are central to how Domain Type Enforcement operates, as seen in systems like SELinux, where domain labels and type labels work together to control interactions. The other options describe broader administration or different models. Central administration refers to managing users and policies at a high level rather than mapping subjects to domains. RBAC assigns users to roles and permissions to roles rather than mapping subjects to domains directly. An Access Control Framework is a general concept that doesn’t specify the mechanism for domain assignment.

Domain Type Enforcement is the mechanism that assigns a subject to a domain and uses that domain to enforce permissions in an access-control matrix. In this approach, each subject (such as a process) runs within a specific domain (type), and the policy defines what actions are allowed for that domain on various object types. The association of the subject to a domain determines which row of the access-control matrix applies, so the domain effectively governs all access decisions for that subject. This mapping and enforcement are central to how Domain Type Enforcement operates, as seen in systems like SELinux, where domain labels and type labels work together to control interactions.

The other options describe broader administration or different models. Central administration refers to managing users and policies at a high level rather than mapping subjects to domains. RBAC assigns users to roles and permissions to roles rather than mapping subjects to domains directly. An Access Control Framework is a general concept that doesn’t specify the mechanism for domain assignment.