A city fusion center stores highly sensitive investigative files under system-enforced classification labels, while a parks department team drive lets folder owners decide who can share documents. Which access-control contrast best describes these two approaches?
Select an answer to reveal the explanation.
Short Explanation
Picture two filing cabinets: one where a security officer stamped SECRET and no clerk can peel the sticker, and one where the folder owner hands out keys. Fusion-center labels are MAC; the team drive's owner shares are DAC. Different trust models for different data.
Full Explanation
Mandatory access control (MAC) enforces centrally defined labels or clearances so users cannot freely reclassify or share objects downward. Discretionary access control (DAC) lets object owners grant or revoke access, which fits collaborative team drives but is inappropriate for highly sensitive fusion-center holdings. Distinguishing MAC from DAC (and from RBAC/ABAC) is a core Domain 5 authorization skill for selecting the right model per sensitivity.