ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

The scenario describes discretionary access control. In DAC, the creator (owner) of an object determines who can access that object and with what permissions. On Unix-like systems, standard file permissions managed with chmod and chown are classic examples of DAC because the owner can freely delegate or revoke access. Mandatory access control instead relies on system-enforced labels that override owner wishes. Role-based access control assigns permissions according to predefined roles, not individual owners' discretion. Attribute-based access control evaluates attributes of users and resources at decision time rather than letting owners manually set permissions.