# CSSLP — Question 426

**Type:** multiple_choice
**Topics:** topic_1

## Question

Which of the following models uses a directed graph to specify the rights that a subject can transfer to an object or that a subject can take from another subject?

## Correct Answer

_See scenario._

## Explanation

Selected Answer: A
Option A: Take-grant protection model

https://en.wikipedia.org/wiki/Take-grant_protection_model

The model represents a system as directed graph, where vertices are either subjects or objects. The edges between them are labeled, and the label indicates the rights that the source of the edge has over the destination. Two rights occur in every instance of the model: take and grant. They play a special role in the graph rewriting rules describing admissible changes of the graph.

There are a total of four such rules:

 take rule allows a subject to take rights of another object (add an edge originating at the subject)
 grant rule allows a subject to grant own rights to another object (add an edge terminating at the subject)
 create rule allows a subject to create new objects (add a vertex and an edge from the subject to the new vertex)
 remove rule allows a subject to remove rights it has over on another object (remove an edge originating at the subject)

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/isc/CSSLP/426  
Practice (tracked): https://hiexam.net/study/CSSLP/practice