nerdexam
Cisco

200-201 · Question #96

What is the difference between mandatory access control (MAC) and discretionary access control (DAC)?

The correct answer is B. MAC is the strictest of all levels of control and DAC is object-based access. Discretionary Access Control (DAC) allows the owner or creator of an object (e.g., a file or resource) to control access permissions to that object. The owner can decide who has access to the object and what level of access they have. Mandatory Access Control (MAC), on the…

Submitted by devops_kid· Mar 6, 2026Security Concepts

Question

What is the difference between mandatory access control (MAC) and discretionary access control (DAC)?

Options

  • AMAC is controlled by the discretion of the owner and DAC is controlled by an administrator
  • BMAC is the strictest of all levels of control and DAC is object-based access
  • CDAC is controlled by the operating system and MAC is controlled by an administrator
  • DDAC is the strictest of all levels of control and MAC is object-based access

How the community answered

(56 responses)
  • A
    5% (3)
  • B
    89% (50)
  • C
    4% (2)
  • D
    2% (1)

Explanation

Discretionary Access Control (DAC) allows the owner or creator of an object (e.g., a file or resource) to control access permissions to that object. The owner can decide who has access to the object and what level of access they have. Mandatory Access Control (MAC), on the other hand, is a more stringent access control mechanism where access decisions are made by the system or security administrator based on predetermined rules or labels.

Topics

#access control#MAC#DAC

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice