DJames617 Comparison Table
| Option | Primary difference | Best use |
|---|---|---|
| RBAC | Permissions from job roles | Stable job functions and least privilege groups |
| ABAC | Policies evaluate attributes | Device, time, clearance, label, department, location |
| DAC | Owner controls access | Flexible collaboration with owner accountability |
| MAC | System-enforced labels | High-assurance environments with strict classification |
Exam clue: When many conditions drive a decision, ABAC is often stronger than trying to create endless roles.
How To Use It
Read the scenario for the required outcome. If the requirement is prevention, do not stop at detection. If the requirement is accountability, do not stop at authentication. If the requirement is recovery, distinguish data loss from service downtime.