🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 9 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

A defense contractor must standardize permissions for project files on multiple Windows and Linux servers. Access must follow data classification labels (Confidential, Secret, Top-Secret) tied to personnel clearances. Local administrators cannot create exceptions, and permissions must persist when a file is copied within the domain. Which access control approach BEST meets these needs?

  • Apply Role-Based Access Control by assigning project roles and linking them to shared folder permissions.

  • Use Discretionary Access Control with inherited Access Control Lists that mirror the classification hierarchy.

  • Implement a centrally managed Mandatory Access Control system that assigns fixed classification labels to files and clearances to users.

  • Deploy an Attribute-Based Access Control solution that evaluates user claims and file tags at run time.

ISC2 Systems Security Certified Practitioner (SSCP)
Access Controls
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot