From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Unlock this course with a free trial

Join today to access over 24,600 courses taught by industry experts.

Mandatory access controls (MAC)

Mandatory access controls (MAC)

From the course: CompTIA Advanced Security Practitioner (CASP+) (CAS-004) Cert Prep

Start my 1-month free trial Buy for my team

Mandatory access controls (MAC)

“

- In this lesson, we're going to discuss mandatory access controls known as MAC. Now, mandatory access controls use security labels to determine which users are authorized to access a particular resource. This type of access control is complex to configure and more expensive to maintain. Therefore, it's generally going to be reserved for high security systems. Now, under this system, anything that is not specifically allowed is going to be considered forbidden and not accessible by your users. For this system to work effectively, every single user and every single resource has to be assigned a security label. If the user's level is not equal to or higher than the resources level, that user is going to be blocked from accessing that resource. For example, let's pretend you work in the military and you have a secret clearance, and therefore, anything you want to access that is on that system that's labeled as secret, confidential or unclassified, will allow you to access it because your…

Contents