CompTIA Security Plus Mock Test Q898

Joe Has read and write access to his own home directory. Joe and Ann are collaborating on a project, and Joe would like to give Ann write access to one particular file in this home directory. Which of the following types of access control would this reflect?

A. Role-based access control
B. Rule-based access control
C. Mandatory access control
D. Discretionary access control


Correct Answer: D
Section: Access Control and Identity Management

Explanation:
Discretionary access control (DAC) allows access to be granted or restricted by an object’s owner based on user identity and on the discretion of the object owner.

Incorrect Answers:
A: Basically, Role-based Access Control is based on a user’s job description.
B: Rule-based access control is used for network devices that filter traffic based on filtering rules.
C: Mandatory Access Control allows access to be granted or restricted based on the rules of classification.

References:
Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 278-284