200-201 · Question #485
A security consultant must change the identity access management model for their organization. The new approach will put responsibility on the owner, who will decide which users will have access to…
The correct answer is B. discretionary access control due to easy maintenance. In a Discretionary Access Control (DAC) model, the owner of the resource (such as files or systems) has control over who can access those resources. The owner decides which users are granted permissions, making it a flexible and easy-to-maintain system, especially in…
Question
A security consultant must change the identity access management model for their organization. The new approach will put responsibility on the owner, who will decide which users will have access to which resources. Which low-cost model must be used for this purpose?
Options
- Amandatory access control, due to low granularity
- Bdiscretionary access control due to easy maintenance
- Cdiscretionary access control, due to high security
- Dmandatory access control, due to automatic scaling
How the community answered
(51 responses)- A2% (1)
- B92% (47)
- C2% (1)
- D4% (2)
Explanation
In a Discretionary Access Control (DAC) model, the owner of the resource (such as files or systems) has control over who can access those resources. The owner decides which users are granted permissions, making it a flexible and easy-to-maintain system, especially in environments where the access control decisions are frequently changing. Key points about DAC: Responsibility is on the owner: The resource owner determines access rights. Low-cost and easy to manage: Compared to more rigid models like Mandatory Access Control (MAC), DAC is generally simpler and cheaper to implement because it doesn't require centralized oversight. Granularity: DAC provides fine-grained control at the resource level, where individual owners can set access permissions.
Topics
Community Discussion
No community discussion yet for this question.