A security architect at a financial services company is designing the access control mechanism for a new collaborative research platform. The platform must allow data analysts, who create proprietary research documents, to independently manage permissions and share their work with specific colleagues on their project team. Which access control model BEST supports this requirement of owner-managed permissions?
Discretionary Access Control (DAC) is the correct model because it allows the owner of a resource to have the discretion to grant or deny access to other subjects. In the given scenario, the data analysts are the owners of the documents they create and need to manage permissions themselves, which is the defining characteristic of DAC. Mandatory Access Control (MAC) is incorrect because access is determined by a central authority based on security labels, not the owner's choice. Role-Based Access Control (RBAC) is also incorrect as permissions are assigned based on a user's role within the organization, which may not align with the specific sharing needs for a given project.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Discretionary Access Control (DAC)?
Open an interactive chat with Bash
How does DAC differ from Mandatory Access Control (MAC)?
Open an interactive chat with Bash
What are potential risks of using DAC?
Open an interactive chat with Bash
ISC2 CISSP
Identity and Access Management (IAM)
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .