ISC Exam Questions

Which type of access control model allows data owners to be the ultimate source for determining acce

Which type of access control model allows data owners to be the ultimate source for determining access to system resources?

A.
Discretionary

B.
Mandatory

C.
Brewer & Nash

D.
Clark-Wilson

Explanation:
A system that uses discretionary access control (DAC) enables the owner of theresource to specify which subjects can access specific resources. This model iscalled discretionary because the control of access is based on the discretion of theowner.