Certified Information Systems Security Professional
by ISC2 • CISSP
ISC2's CISSP proves broad, deep technical and managerial competence across eight security domains. It's one of the most requested credentials in cybersecurity job postings worldwide.
1,000+ practice questions8 exam domainsFree trial included
Exam blueprint
Official domain weightings: where the questions come from, and where to spend your study time.
Free trial
Try a real CISSP question
Feel the real question style and difficulty. No card required. Then unlock the full 1,000+ question bank, blueprint-aligned by domain, with your readiness score and pass confidence.
Start your free trialWhich access control model uses security labels assigned to both subjects and objects?
ADiscretionary Access Control (DAC)
BMandatory Access Control (MAC)
CRole-Based Access Control (RBAC)
DAttribute-Based Access Control (ABAC)
Why: MAC enforces access based on security labels (classifications and clearances) assigned to subjects and objects, set by policy, not the resource owner.