Exam SSCP topic 1 question 21 discussion

(A) Content-dependent access control means: Access to data is based on the actual content of the data itself, rather than just the user's identity or role. In this case: The manager is only allowed to view salary data if the employee's department matches their own. The system evaluates the value inside the “department” field of each data record to decide whether access is allowed.

The content is salaries, so if it were content dependent the manager would not see any salaries. Least privilege would allow the manger to see things in his department while blocking other department information.

A is the correct answer, because the question is asking about an action control mechanism (read, tool or method to execute a principal) NOT a principal or accepted ideology preference. In this case, "least privilege" could be argued for all these access controls, but A is the best fit answer to this scenario purely on how this is worded. Keep that in mind when taking the exam, good luck!

The answer is C. The manager has the least amount of access needed to do their job.

Correct answer is A

CDAC is a subset of database views which falls under the principle of least privilege. The principle of least privilege gives the subject as little control and access as possible while being able to efficiently execute work.