CGRC · Question #657
Which of the following statements about Discretionary Access Control List (DACL) is true? Response:
The correct answer is D. It is a list containing user accounts, groups, and computers that are allowed (or denied) access to. A Discretionary Access Control List (DACL) specifies which users, groups, or computers are allowed or denied specific access to an object.
Question
Which of the following statements about Discretionary Access Control List (DACL) is true? Response:
Options
- AIt is a rule list containing access control entries.
- BIt specifies whether an audit activity should be performed when an object attempts to access a
- CIt is a unique number that identifies a user, group,and computer account.
- DIt is a list containing user accounts, groups, and computers that are allowed (or denied) access to
How the community answered
(49 responses)- A4% (2)
- B2% (1)
- D94% (46)
Why each option
A Discretionary Access Control List (DACL) specifies which users, groups, or computers are allowed or denied specific access to an object.
While a DACL is a rule list containing ACEs, option D provides a more complete and descriptive explanation of *what* those ACEs define in the context of access control.
This statement describes a System Access Control List (SACL), which is used for auditing access attempts, not for controlling access permissions.
This describes a Security Identifier (SID), which is a unique value used to identify security principals (users, groups, computers), not the DACL itself.
A Discretionary Access Control List (DACL) contains Access Control Entries (ACEs) that specify the permissions (allow or deny) granted or denied to specific users, groups, or computer accounts for accessing an object.
Concept tested: Discretionary Access Control List (DACL) functionality
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-lists
Topics
Community Discussion
No community discussion yet for this question.