5 D Question 5 security models allow only what access is explicitly listed and exclude all other access by default, while security models allow all access by default and only eliminate access explicit