nerdexam
(ISC)2

CAP · Question #21

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

The correct answer is A. Access control entry (ACE). A DACL is made up of individual entries called Access Control Entries (ACEs), each of which grants or denies specific permissions to a user or group.

Implementation of Security and Privacy Controls

Question

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

Options

  • AAccess control entry (ACE)
  • BDiscretionary access control entry (DACE)
  • CAccess control list (ACL)
  • DSecurity Identifier (SID)

How the community answered

(45 responses)
  • A
    91% (41)
  • B
    2% (1)
  • C
    4% (2)
  • D
    2% (1)

Why each option

A DACL is made up of individual entries called Access Control Entries (ACEs), each of which grants or denies specific permissions to a user or group.

AAccess control entry (ACE)Correct

An Access Control Entry (ACE) is the fundamental building block of a DACL. Each ACE specifies a trustee (user or group via their SID) and the type of access (allow or deny) granted to a security object. The DACL is simply the ordered list of these ACE records.

BDiscretionary access control entry (DACE)

DACE is not a real or defined term in Windows security architecture.

CAccess control list (ACL)

An ACL is the entire list structure containing multiple ACEs, not a single entry within it.

DSecurity Identifier (SID)

A Security Identifier (SID) uniquely identifies a security principal such as a user or group, but it is not itself a permission entry in a DACL.

Concept tested: DACL and Access Control Entry (ACE) structure

Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-entries

Topics

#Access Control Lists (ACLs)#Access Control Entry (ACE)#Discretionary Access Control (DAC)#Permissions

Community Discussion

No community discussion yet for this question.

Full CAP Practice