Exam 200-201 topic 1 question 154 discussion

Agree with you! Most important to see: "the object owner determines the permissions" is the exact definition of DAC There are lot reference, f.e.: https://www.ekransystem.com/en/blog/mac-vs-dac Mandatory access control (MAC) is a model of access control where the operating system provides users with access based on data confidentiality and user clearance levels. In this model, access is granted on a need to know basis: users have to prove a need for information before gaining access. Discretionary access control (DAC) is an identity-based access control model that provides users a certain amount of control over their data. Data owners (or any users authorized to control data) can define access permissions for specific users or groups of users.