An organization is trying to decide which type of access control is most appropriate for the
network. The current access control approach is too complex and requires significant overhead.
Management would like to simplify the access control and provide user with the ability to
determine what permissions should be applied to files, document, and directories. The access
control method that BEST satisfies these objectives is:
A.
Rule-based access control
B.
Role-based access control
C.
Mandatory access control
D.
Discretionary access control
D.
1
0
D
1
0
Role-Based Access Control (RBAC) models approach the problem of access control based on
established roles in an organization.
In a Discretionary Access Control (DAC) model, network users have some flexibility regarding how information is accessed. This model allows users to share information dynamically with other users. Discretionary access control (DAC) allows access to be granted or restricted by an object’s owner based on user identity and on the discretion of the object owner.
In this scenario, the management would like to simplify the access control because the current access control approach is too complex and requires significant overhead. The best way to reduce the overhead of the administrator is using Discretionary Access Control model and let the users determine the access.
The correct answer is D.
3
0