A university student is reported in the media to have won $$10,000,000$ on the lottery. The University uses the DAC formal model. What extra step to ensure compliance with data protection law should be considered by the University?

Question $29$ Answer

a$.$

Revise access control lists for relevant objects.

b$.$

Switch to the MAC formal model.

c$.$

Switch to the RBAC formal model.

d$.$

Block all access to the student$$s personal data.

e$.$

Carry out an information security audit.

Question $30$

Answer saved

Marked out of $2\mathrm{.}00$

Flag question

Question text

Which of the following statements is true?

Question $30$ Answer

a$.$

RBAC is more expensive to implement than DAC in complex organisations.

b$.$

The DAC formal model provides more security than RBAC.

c$.$

MAC object owners assign permissions to subjects.

d$.$

RBAC can improve compliance by limiting the data a role can access.

e$.$

Access by subjects to objects in the DAC model is determined by groups.