Which of the following is true about MAC?

A.
It is more flexible than DAC.

B.
It is more secure than DAC.

C.
It is less secure than DAC.

D.
It is more scalable than DAC.

Explanation:

Mandatory controls are access controls that are based on a policy that the user, and more
importantly the processes running with that user’s privileges, is not allowed to violate. An example
of this is “Top Secret” data is configured so that regardless of what the user does, the data cannot be
transmitted to someone who does not have “Top
Secret” status. Thus no “trojan horse” program could ever do what the user is not allowed to do
anyway. The restrictions of mandatory controls are (at least in normal mode) also applied to the user
who in a discretionary system would be “root”, or the superuser.