200-201 Question 54
Single answerA cybersecurity analyst is tasked with configuring access permissions on a file server for a newly created project. The team lead requests that specific users should have full permissions to the project files, while others should only have read-only access. The analyst decides to use Discretionary Access Control (DAC) to implement this. Which of the following best describes how the analyst will configure the permissions using DAC?
- A
The analyst assigns permissions based on the users' roles within the organization.
- B
The analyst assigns permissions based on the file owner’s discretion, allowing the owner to specify who can access the files and with what permissions.
- C
The analyst configures access permissions based on predefined security labels associated with the project files.
- D
The analyst assigns permissions dynamically based on the sensitivity of the data and the users’ clearance levels.
Show answer and explanation
Correct answer: B
Explanation
Discretionary Access Control (DAC) is a method of access control where the owner of the resource (such as a file or folder) has the discretion to decide who can access it and what type of access they have (e.g., read, write, execute). This contrasts with other access control models like RBAC or MAC, where permissions are determined by roles or predefined policies, rather than the resource owner.
- A. Incorrect.
This describes Role-Based Access Control (RBAC), where permissions are assigned based on user roles, not the owner’s discretion.
- B. Correct.
This is the correct description of Discretionary Access Control (DAC). In DAC, the file owner has the authority to control access by granting or restricting permissions to other users.
- C. Incorrect.
This describes Mandatory Access Control (MAC), where access is controlled by security labels and policies, not the file owner.
- D. Incorrect.
This describes Attribute-Based Access Control (ABAC), where access is granted dynamically based on attributes like data sensitivity, not the owner’s discretion.