Which of the following statements are advantages that Mandatory Access Control has over Discretionary? Access Control models? (Select TWO correct answers)

MAC policies are generally more complex to configure correctly than DAC policies due to their granular and system-wide nature, requiring detailed understanding and precise definitions for subjects and objects.

The concept of privileged users exists in both DAC and MAC systems; MAC enhances security by being able to restrict even privileged users, rather than introducing the concept itself.

MAC policies, by design, can restrict even the root user from performing actions that violate the defined security policy, thus potentially reducing the root user's ability to bypass controls or correct errors if those actions are unauthorized by policy.

MAC empowers the operating system kernel to make all access decisions based on a system-wide security policy, rather than relying on the owner of an object, providing a centralized and consistent enforcement mechanism.

In MAC systems, security policies are defined and enforced by administrators, centralizing trust and control over system security with them, rather than distributing it among individual users who own resources, as in DAC.