CAP · Question #21
Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?
The correct answer is A. Access control entry (ACE). A DACL is made up of individual entries called Access Control Entries (ACEs), each of which grants or denies specific permissions to a user or group.
Question
Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?
Options
- AAccess control entry (ACE)
- BDiscretionary access control entry (DACE)
- CAccess control list (ACL)
- DSecurity Identifier (SID)
How the community answered
(45 responses)- A91% (41)
- B2% (1)
- C4% (2)
- D2% (1)
Why each option
A DACL is made up of individual entries called Access Control Entries (ACEs), each of which grants or denies specific permissions to a user or group.
An Access Control Entry (ACE) is the fundamental building block of a DACL. Each ACE specifies a trustee (user or group via their SID) and the type of access (allow or deny) granted to a security object. The DACL is simply the ordered list of these ACE records.
DACE is not a real or defined term in Windows security architecture.
An ACL is the entire list structure containing multiple ACEs, not a single entry within it.
A Security Identifier (SID) uniquely identifies a security principal such as a user or group, but it is not itself a permission entry in a DACL.
Concept tested: DACL and Access Control Entry (ACE) structure
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-entries
Topics
Community Discussion
No community discussion yet for this question.