Certified In Cybersecurity CC · Free Practice Question Easy
Question 59
In which access control model does the data owner decide who can access the data?
-
A
RBAC
-
B
MAC
-
C
DAC
-
D
RAC
Reveal correct answer
Correct answer: C
Explanation
In Discretionary Access Control (DAC) a model, the data owner has discretion over who can access the data. For example, in an organization, a project manager who owns a particular project document can decide which team members can access and edit the document.
RBAC (role-based access control), MAC (mandatory access control), and RAC (rule-based access control) are false choices. In RBAC, access is granted based on the user's role within the organization, not at the discretion of the data owner. MAC, on the other hand, uses labels (often called security labels) to determine access and is typically used in organizations that require a high level of data security. RBAC uses a set of approved rules or policies to determine who can access data.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
