Mobile health inspectors need access to case records only when their clearance is sufficient, they are within an assigned district geofence, and the request occurs during their shift. Which model best expresses that decision?
Select an answer to reveal the explanation.
Short Explanation
Clearance, GPS district, and shift clock are three knobs the policy engine turns at once. That is attribute-based access control—mix subject, object, and environment attributes instead of one static ACL.
Full Explanation
Attribute-based access control (ABAC) authorizes requests by evaluating attributes of the subject (for example clearance), the object (for example case sensitivity), and the environment (location, time). Combining those dimensions for mobile inspectors fits ABAC far better than DAC ownership, single-label MAC, or authentication strength alone. CISSP candidates should recognize ABAC when multiple dynamic attributes drive the decision.