Exam SY0-601 topic 1 question 625 discussion

MAC (Mandatory access control) = Thinking M for Military, where access is provided by rank and official positions "need to know basis". While DAC (discretionary) on the other hands lets the owner DECIDE who gets access

Access is based upon the owner's discretion; therefore, discretionary. A basic example: I’m on an employment team within HR and we are creating flyers and event logistics about an upcoming job fair. Let’s say that I make the flyer (just a word doc) and place it into my team’s shared folder. I am the owner and give my fellow mates read/write access at my discretion so they can make edits if needed.

Discretionary Access Control (DAC) ● Resource owners specify which users can access their resources ● Access control based on user identity, profile, or role ● Allows resource owners to grant access to specific users

B. When the owner decide who will access your data we are talking about DAC.

DAC, the owner of an object has full control over who can access it. The owner can grant or revoke access to the object as they see fit. This is the most flexible access control scheme, but it can also be the most complex to manage. Mandatory access control (MAC) is a type of access control that assigns permissions to users based on their clearance level. This is the most secure access control scheme, but it can also be the most difficult to implement and manage. In this case, the systems administrator needs to implement an access control scheme that will allow the object's access policy to be determined by its owner.