Question

A user sends an e-mail request asking for read-only access to files that are not considered sensitive. A Discretionary Access Control (DAC) methodology is in place. Which is the MOST suitable approach that the administrator should take?

A. Administrator should request data owner approval to the user access
B. Administrator should request manager approval for the user access
C. Administrator should directly grant the access to the non-sensitive files
D. Administrator should assess the user access need and either grant or deny the access

Answer 1

A

Step-by-step explanation:

Although the administrator has a level of access above that of a user, he cannot automatically approve due the presence of Discretionary Access Control (DAC). Hence, the administrator should request data owner approval to the user access.