Which of the following statements are advantages that Mandatory Access Control has over Discretionary? Access Control models? (Select TWO correct answers)

MAC policies are generally more complex to configure and manage than DAC, requiring a deeper understanding of security contexts and policy rules.

The concept of privileged remote users is not a unique advantage of MAC; DAC systems can also have remote users with varying privileges.

MAC policies, by restricting even root's actions to what is allowed by policy, can sometimes make it harder for the root user to perform actions that are outside the defined policy, rather than increasing their ability to correct errors without policy modification.

In MAC, the kernel directly consults security policy rules to determine if a subject (e.g., a process) is permitted to access an object (e.g., a file, device, or another process), providing a centralized and unalterable enforcement point for security.

MAC policies are centrally defined and enforced by the system administrator, ensuring that access decisions are made according to a global security policy, regardless of the owner's discretion. This model inherently places trust in the administrators who define the policy, rather than relying on individual users to set appropriate permissions for their own resources.