Preparing for your next security certification exam? After trying your hand at this practice test question, join the FREE CertMike Study Group for the CISSP, Security+, CySA+, PenTest+, CISM+ or SSCP certification to receive new questions each week. You’ll also receive free access to my customized study strategies.

Fred created a set of IP restrictions on his Cisco router using Cisco’s extended access control list (ACL) functionality.  What type of access control model is Fred enforcing?

A. Role-based access control
B. Discretionary access control
C. Rule-based access control
D. Attribute-based access control
Correct Answer: C

Network access control lists are examples of rule-based access control because the router will make decisions based upon the rules that Fred provides. The router does not know the identity of the user, so it cannot perform role-based or attribute-based access control. Users have no authority to delegate access control decisions, so this is not an example of discretionary access control.

Interested in more practice test questions? 

Get a copy of my official CertMike Practice Test books for the Security+ exam, CISSP exam, SSCP exam, or CySA+ exam and practice with hundreds of questions designed just like the real test!