Which access control policy allows the owner of a file to determine access privileges?

Prepare for the SANS Global Industrial Cyber Security Professional Exam. Test your skills with multiple choice questions featuring hints and explanations. Ensure your success with our comprehensive materials.

Discretionary Access Control (DAC) is the policy that enables the owner of a file or resource to determine who has access and what kind of access they have. In a DAC model, the resource owner has the discretion to grant or revoke permissions to other users, allowing for a more flexible and personalized approach to access permissions.

This ownership-based control means that file owners can set specific privileges such as read, write, or execute for other users or groups. It contrasts with other access control models where permissions are set by system policies or roles rather than by the resource owner themselves.

For example, if a user creates a document, that user can decide who else can view or modify it, illustrating the key feature of DAC where control is at the discretion of the owner.

Other access control models, like Mandatory Access Control (MAC), impose strict controls based on system-enforced policies and classifications, thus not allowing resource owners to set permissions. Role Based Access Control (RBAC) assigns permissions based on the role a user has within an organization, which is determined by the organization's policy rather than individual discretion. Access Matrix Control, while a method of representing access control information, isn't a standard policy in the way DAC is.

In essence, DAC's defining characteristic

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy