Quiz on Access Control Models

Which of the following is true about Discretionary Access Control (DAC)?

• Access is based on a centralized system administrator's decisions.

• Users have full control over the resources they own.

• Access rules are determined based on the organization's policies only.

• Access control decisions are made dynamically by the system.

In DAC, who determines the access permissions for a resource?

• System Administrator

• Operating System

• Resource Owner

• Security Manager

Which of the following mechanisms is commonly used in DAC?

• Security Labels

• Role-Based Access Control

• Access Control List (ACL)

• Multi-Level Security (MLS)

In DAC, what happens if a user shares their file with another user?

• Ownership of the file is transferred.

• Access rights are delegated to the second user.

• The system checks for security labels before sharing.

• The file is automatically encrypted.

What is a primary drawback of DAC?

• It is too restrictive for users.

• It relies on centralized policies.

• It allows the propagation of access rights, leading to potential misuse.

• It does not allow users to share their resources.

Which of the following is not typically associated with DAC?

• File ownership

• Group permissions

• Access Control Matrix

• Security Clearance Levels

How is DAC commonly implemented in UNIX/Linux systems?

• File security labels

• User and group permissions (rwx model)

• Role-Based Access Control (RBAC)

• Mandatory Integrity Control

In DAC, if a user transfers file ownership, who determines the new access rules?

• The system administrator

• The new owner

• The operating system

• The original owner retains control

Which of the following is an example of DAC?

• A government system that classifies files as 'Secret' or 'Confidential.'

• A university library system where users can share their book lists.

• A corporate email system that restricts all emails based on organizational policy.

• A healthcare database with predefined roles and permissions.

Access Control Lists (ACLs) in DAC define permissions for:

• Files only

• Groups only

• Individual users or groups for specific objects

• All users on a system