Certified Information Privacy Technologist (CIPT) — Question 56

A user who owns a resource wants to give other individuals access to the resource. What control would apply?

Answer options

• A. Mandatory access control.
• B. Role-based access controls.
• C. Discretionary access control.
• D. Context of authority controls.

Correct answer: C

Explanation

Discretionary access control (DAC) is the correct answer because it permits the owner of a resource to make decisions about who can access it. In contrast, mandatory access control (MAC) and role-based access controls (RBAC) impose restrictions based on policies and roles rather than individual owner decisions, while context of authority controls does not directly address user permissions.