SSCP · Question #1142
___________, generally considered "need to know" access is given based on permissions granted to the user.
The correct answer is B. DAC - Discretionary Access Control. Discretionary Access Control (DAC) allows resource owners to grant 'need to know' access based on specific permissions given to users.
Question
___________, generally considered "need to know" access is given based on permissions granted to the user.
Options
- AMAC - Mandatory Access Control
- BDAC - Discretionary Access Control
- CSAC - Strategic Access Control
- DLAC - Limited Access Control
How the community answered
(16 responses)- B94% (15)
- C6% (1)
Why each option
Discretionary Access Control (DAC) allows resource owners to grant 'need to know' access based on specific permissions given to users.
Mandatory Access Control (MAC) is a more rigid access model where access decisions are enforced by the operating system based on predefined security labels and clearances, not at the discretion of the resource owner.
Discretionary Access Control (DAC) empowers the owner of a resource to define and grant specific permissions to users or groups, aligning with the 'need to know' principle by allowing flexible access assignment.
SAC (Strategic Access Control) is not a recognized standard access control model in cybersecurity.
LAC (Limited Access Control) is not a recognized standard access control model in cybersecurity.
Concept tested: Discretionary Access Control (DAC)
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-models
Topics
Community Discussion
No community discussion yet for this question.