CompTIA Security Plus Mock Test Q898

Joe Has read and write access to his own home directory. Joe and Ann are collaborating on a project, and Joe would like to give Ann write access to one particular file in this home directory. Which of the following types of access control would this reflect?

A. Role-based access control
B. Rule-based access control
C. Mandatory access control
D. Discretionary access control

Correct Answer: D
Section: Access Control and Identity Management

Discretionary access control (DAC) allows access to be granted or restricted by an object’s owner based on user identity and on the discretion of the object owner.

Incorrect Answers:
A: Basically, Role-based Access Control is based on a user’s job description.
B: Rule-based access control is used for network devices that filter traffic based on filtering rules.
C: Mandatory Access Control allows access to be granted or restricted based on the rules of classification.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 278-284