My user profile specifies which network drives I can read and write to. What is the name of the type of logical access management wherein my access and rights are determined centrally?

Question

Options

• ADiscretionary Access Control (DAC)
• BMandatory Access Control (MAC)
• CPublic Key Infrastructure (PKI)

• A
  8% (2)
• B
  83% (20)
• C
  8% (2)

Explanation

Mandatory Access Control (MAC) fits because access rights are assigned centrally by an administrator or system policy - your profile dictates what you can read/write, and you have no ability to change or delegate those permissions yourself. This central, policy-driven enforcement is the defining characteristic of MAC.

Option A (DAC) is wrong because in Discretionary Access Control, the resource owner decides who gets access - permissions flow from the owner's discretion, not a central authority.

Option C (PKI) is wrong because Public Key Infrastructure is a framework for managing digital certificates and encryption keys to verify identity - it handles authentication, not access rights assignment.

Memory tip: Think "MAC = Mandated Access, Centrally." Just like a MAC address is burned into hardware and can't be changed by the user, MAC access control is locked down by the system - you get what policy says you get, nothing more.

No community discussion yet for this question.