Which of the following statements about Discretionary Access Control List (DACL) is true?

Question

Options

• AIt is a rule list containing access control entries.
• BIt specifies whether an audit activity should be performed when an object attempts to access
• CIt is a list containing user accounts, groups, and computers that are allowed (or denied)
• DIt is a unique number that identifies a user, group, and computer account

• A
  6% (2)
• C
  90% (28)
• D
  3% (1)

Explanation

A Discretionary Access Control List (DACL) is a component of an object's security descriptor in Windows that specifies which users, groups, or computers are granted or denied access to that object. It is composed of Access Control Entries (ACEs) that define permissions. Option A describes an ACL generally but is more applicable to a SACL structure description. Option B describes a System Access Control List (SACL), which controls auditing. Option D describes a Security Identifier (SID). The DACL specifically identifies the principals (user accounts, groups, computer accounts) and their corresponding allow or deny permissions for a securable object.

No community discussion yet for this question.