CGRC · Question #102
Which of the following statements about System Access Control List (SACL) is true? Response:
The correct answer is A. It contains a list of any events that are set to audit for that particular object. A System Access Control List (SACL) is used to specify which events related to an object should be audited, enabling security monitoring and compliance.
Question
Which of the following statements about System Access Control List (SACL) is true? Response:
Options
- AIt contains a list of any events that are set to audit for that particular object.
- BIt is a mechanism for reducing the need for globally unique IP addresses.
- CIt contains a list of both users and groups and whatever permissions they have.
- DIt exists for each and every permission entry assigned to any object.
How the community answered
(27 responses)- A93% (25)
- C4% (1)
- D4% (1)
Why each option
A System Access Control List (SACL) is used to specify which events related to an object should be audited, enabling security monitoring and compliance.
A SACL defines the security events that the operating system audits when an attempt is made to access an object. It contains System Audit Access Control Entries (ACEs) that specify the types of access to be audited for users or groups.
Reducing the need for globally unique IP addresses is the function of Network Address Translation (NAT), not SACLs.
A Discretionary Access Control List (DACL) contains a list of users and groups and their permissions, not a SACL.
A SACL contains entries for auditing, not for every permission entry assigned; permissions are handled by DACLs.
Concept tested: System Access Control List (SACL) functionality.
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/system-acl
Topics
Community Discussion
No community discussion yet for this question.