nerdexam
(ISC)2

CGRC · Question #345

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group? Response:

The correct answer is A. Access control entry (ACE). An Access Control Entry (ACE) is a specific component within a Discretionary Access Control List (DACL) that defines permissions for a particular user or group on an object.

Implementation of Security and Privacy Controls

Question

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group? Response:

Options

  • AAccess control entry (ACE)
  • BDiscretionary access control entry (DACE)
  • CAccess control list (ACL)
  • DSecurity Identifier (SID)

How the community answered

(47 responses)
  • A
    87% (41)
  • B
    6% (3)
  • C
    2% (1)
  • D
    4% (2)

Why each option

An Access Control Entry (ACE) is a specific component within a Discretionary Access Control List (DACL) that defines permissions for a particular user or group on an object.

AAccess control entry (ACE)Correct

An Access Control Entry (ACE) is a fundamental element of an Access Control List (ACL), specifically within a Discretionary Access Control List (DACL), that precisely specifies the access rights (permissions or denials) for a security principal (user, group, or computer) to an object.

BDiscretionary access control entry (DACE)

While the concept is related, 'Discretionary Access Control Entry (DACE)' is not a standard or commonly recognized term; the correct and universally accepted term is Access Control Entry (ACE).

CAccess control list (ACL)

An Access Control List (ACL) is the entire collection of Access Control Entries (ACEs) associated with an object, while an ACE is an individual entry within that list, not the list itself.

DSecurity Identifier (SID)

A Security Identifier (SID) is a unique, variable-length identifier used to identify a security principal (user, group, or computer) within a network, but it is not the entry that grants permissions; rather, a SID is referenced within an ACE.

Concept tested: Access Control Entry (ACE) definition

Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-entries

Topics

#Access Control Entry (ACE)#Discretionary Access Control (DAC)#Access Control List (ACL)#Permissions

Community Discussion

No community discussion yet for this question.

Full CGRC Practice