(ISC)2 Certified in Cybersecurity Practice Exam

In the context of cybersecurity, what does the acronym DAC stand for?

1. Differential Access Control

2. Discretionary Access Control

3. Dynamic Access Control

4. Directed Access Control

The correct answer is: Discretionary Access Control

In the context of cybersecurity, the acronym DAC stands for Discretionary Access Control. This is a security model that grants individuals the ability to control access to their own resources. The central idea of DAC is that the owner of a resource has the discretion to determine who can access their resource and what privileges they have. This model allows users to make decisions about who can read, write, or execute the files or data they own. Discretionary Access Control is widely utilized in operating systems and file-sharing environments, as it provides users with flexibility and control over their own information and assets. While this can enhance user autonomy and responsiveness, it also carries risks, as owners might inadvertently grant permissions to unauthorized users, leading to potential security risks. In comparison, the other acronyms don't align with standard definitions in cybersecurity. Differential Access Control is not a recognized access control standard. Dynamic Access Control refers to a more adaptive form of access control, typically seen in contexts like cloud environments or identity management, but it is not abbreviated as DAC. Directed Access Control is similarly not a common term in cybersecurity discussions. Understanding these distinctions helps reinforce why Discretionary Access Control is the correct answer in this context.