Which of the following is a means of restricting access to objects based on the identity of the subject
to which they belong?

A.
Mandatory access control

B.
Group access control

C.
Discretionary access control

D.
User access control

Explanation:

The question does not ask about the identity of the accessing subject, the question refers to the
subject to which the object belongs (ie the owner).
The owner setting the access rights is the definition of DAC.
“DAC systems grant or deny access based on the identity of the subject. ….” Harris, 3rd Ed, p 163