The network administrator at a small organization prefers to allow resource owners to personally assign and revoke access permissions to files on a network share. Which access control model should they implement to accommodate individual control by resource owners?
The network administrator's preference is indicative of the Discretionary Access Control (DAC) model, where resource owners have the freedom to provide or restrict access to other users at their discretion. While Role-Based Access Control (RBAC) autonomously assigns permissions based on the user's role and does not cater to individual resource owner preferences, it is not the best fit for the scenario described. Similarly, Rule-Based Access Control typically works alongside other mechanisms, applying rules (like time-of-day restrictions) that do not relate to individual owner discretion. The Mandatory Access Control (MAC) model enforces access decisions made by a central authority based on security labels, not by individual resource owners, and is thus also not suitable for this situation.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Discretionary Access Control (DAC)?
Open an interactive chat with Bash
How does Role-Based Access Control (RBAC) differ from DAC?
Open an interactive chat with Bash
What are the advantages and disadvantages of using Mandatory Access Control (MAC)?