9.0k views
5 votes
When determining whether or not an account should have access to a resource, in which order are permissions calculated?

a. Implicit deny > explicit permit > explicit deny
b. Implicit deny > explicit deny > explicit permit
c. Explicit deny > explicitly permit > implicit deny
d. Explicit deny > implicit deny > explicit permit

User STIKO
by
7.2k points

1 Answer

3 votes

Answer:

b. Implicit deny > explicit deny > explicit permit

Step-by-step explanation:

The correct answer is:

b. Implicit deny > explicit deny > explicit permit

When determining whether or not an account should have access to a resource, permissions are calculated in the following order:

Implicit deny: This is the default state when no permissions have been explicitly granted. If a user or account does not have a specific permission, it is denied by default.

Explicit deny: This is a specific denial of access that overrides any other permissions that may have been granted. If a user or account has been explicitly denied a permission, they will not have access to that resource.

Explicit permit: This is a specific grant of access that overrides any implicit denies. If a user or account has been explicitly granted a permission, they will have access to that resource.

By following this order of operations, administrators can ensure that access to resources is only granted to those who have been explicitly given permission, while also allowing for specific denials to override any other permissions that may have been granted.

User Ji Ra
by
7.2k points