Joe Has read and write access to his own home directory. Joe and Ann are collaborating on a project, and
Joe would like to give Ann write access to one particular file in this home directory. Which of the following
types of access control would this reflect?

A.
Role-based access control

B.
Rule-based access control

C.
Mandatory access control

D.
Discretionary access control

Explanation:
Discretionary access control (DAC) allows access to be granted or restricted by an object’s owner based
on user identity and on the discretion of the object owner.
Incorrect Answers:
A: Basically, Role-based Access Control is based on a user’s job description.
B: Rule-based access control is used for network devices that filter traffic based on filtering rules.
C: Mandatory Access Control allows access to be granted or restricted based on the rules of classification.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 278-284