Question

IN A DISCRETIONARY ACCESS CONTROL MODEL, WHO IS IN CHARGE OF SETTING PERMISSIONS TO A RESOURCE?

A. THE OWNER OF THE RESOURCE
B. THE ADMINISTRATOR
C. ANY USER OF THE COMPUTER
D. THE ADMINISTRATOR AND THE OWNER

Answer 1

In a Discretionary Access Control model, the owner of the resource is responsible for setting permissions. Administrators may also have this ability if they are granted ownership or when organizational policies require joint responsibility.

Step-by-step explanation:

In a Discretionary Access Control (DAC) model, the individual who is in charge of setting permissions to a resource is A. the owner of the resource. The resource owner has the authority to give or restrict access to other users based on their discretion. This control model is based on the principle that the owner of the resource knows best who should be given access and what level of access is appropriate.

While administrators may also have the ability to set permissions, especially in cases where they have been granted ownership over certain files or systems, it is typically the resource owner who has the primary control in a DAC environment. However, when a combination of stakeholders is involved, the answer can be D. the administrator and the owner, particularly in scenarios where organizational policies dictate joint responsibilities for access control.

Answer 2

In a Discretionary Access Control model, the owner of the resource is primarily responsible for setting permissions, although administrators may also have this ability depending on system policies.

Step-by-step explanation:

In a Discretionary Access Control (DAC) model, permissions to a resource are typically set by the owner of the resource. The concept of 'owner' here implies the person or identity that has been assigned the rights to alter permissions on the resource. In some cases, it is possible for the administrator to also set permissions, especially if they have been granted ownership rights or if the system policy allows administrators to override ownership. However, the primary responsibility lies with the owner, who can, at their discretion, grant access to other users.