nerdexam
(ISC)2

SSCP · Question #1142

___________, generally considered "need to know" access is given based on permissions granted to the user.

The correct answer is B. DAC - Discretionary Access Control. Discretionary Access Control (DAC) allows resource owners to grant 'need to know' access based on specific permissions given to users.

Submitted by noor.lb· Apr 18, 2026Access Controls

Question

___________, generally considered "need to know" access is given based on permissions granted to the user.

Options

  • AMAC - Mandatory Access Control
  • BDAC - Discretionary Access Control
  • CSAC - Strategic Access Control
  • DLAC - Limited Access Control

How the community answered

(16 responses)
  • B
    94% (15)
  • C
    6% (1)

Why each option

Discretionary Access Control (DAC) allows resource owners to grant 'need to know' access based on specific permissions given to users.

AMAC - Mandatory Access Control

Mandatory Access Control (MAC) is a more rigid access model where access decisions are enforced by the operating system based on predefined security labels and clearances, not at the discretion of the resource owner.

BDAC - Discretionary Access ControlCorrect

Discretionary Access Control (DAC) empowers the owner of a resource to define and grant specific permissions to users or groups, aligning with the 'need to know' principle by allowing flexible access assignment.

CSAC - Strategic Access Control

SAC (Strategic Access Control) is not a recognized standard access control model in cybersecurity.

DLAC - Limited Access Control

LAC (Limited Access Control) is not a recognized standard access control model in cybersecurity.

Concept tested: Discretionary Access Control (DAC)

Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-models

Topics

#Access Control Models#DAC#Discretionary Access Control#User Permissions

Community Discussion

No community discussion yet for this question.

Full SSCP Practice