Which term assigns subjects to domains in an access control matrix?

Which term assigns subjects to domains in an access control matrix?

• A. Rule Based Access Control (RBAC)
• B. Domain Type Enforcement (DTE)
• C. Access Control Framework
• D. Data Backups

Answer: (B)

Domain Type Enforcement is the mechanism that maps each subject to a security domain within the access control matrix. In this approach, a subject (like a user or a process) runs in a specific domain, and that domain’s rules determine which object types it can access and what operations it can perform. This mapping of subjects to domains, enforced by policy, provides the containment and control shown in the matrix, making Domain Type Enforcement the term that assigns subjects to domains. RBAC focuses on assigning users to roles and permissions to roles, which is not about assigning subjects to domains. The term “Access Control Framework” is too generic and does not describe the specific domain-based mapping. Data Backups are unrelated to access control mappings.

Domain Type Enforcement is the mechanism that maps each subject to a security domain within the access control matrix. In this approach, a subject (like a user or a process) runs in a specific domain, and that domain’s rules determine which object types it can access and what operations it can perform. This mapping of subjects to domains, enforced by policy, provides the containment and control shown in the matrix, making Domain Type Enforcement the term that assigns subjects to domains.

RBAC focuses on assigning users to roles and permissions to roles, which is not about assigning subjects to domains. The term “Access Control Framework” is too generic and does not describe the specific domain-based mapping. Data Backups are unrelated to access control mappings.