CGRC · Question #345
Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group? Response:
The correct answer is A. Access control entry (ACE). An Access Control Entry (ACE) is a specific component within a Discretionary Access Control List (DACL) that defines permissions for a particular user or group on an object.
Question
Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group? Response:
Options
- AAccess control entry (ACE)
- BDiscretionary access control entry (DACE)
- CAccess control list (ACL)
- DSecurity Identifier (SID)
How the community answered
(47 responses)- A87% (41)
- B6% (3)
- C2% (1)
- D4% (2)
Why each option
An Access Control Entry (ACE) is a specific component within a Discretionary Access Control List (DACL) that defines permissions for a particular user or group on an object.
An Access Control Entry (ACE) is a fundamental element of an Access Control List (ACL), specifically within a Discretionary Access Control List (DACL), that precisely specifies the access rights (permissions or denials) for a security principal (user, group, or computer) to an object.
While the concept is related, 'Discretionary Access Control Entry (DACE)' is not a standard or commonly recognized term; the correct and universally accepted term is Access Control Entry (ACE).
An Access Control List (ACL) is the entire collection of Access Control Entries (ACEs) associated with an object, while an ACE is an individual entry within that list, not the list itself.
A Security Identifier (SID) is a unique, variable-length identifier used to identify a security principal (user, group, or computer) within a network, but it is not the entry that grants permissions; rather, a SID is referenced within an ACE.
Concept tested: Access Control Entry (ACE) definition
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-entries
Topics
Community Discussion
No community discussion yet for this question.