Certified Authorization Professional (CAP) — Question 14

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

Answer options

• A. Access control entry (ACE)
• B. Discretionary access control entry (DACE)
• C. Access control list (ACL)
• D. Security Identifier (SID)

Correct answer: A

Explanation

The correct answer is A, Access control entry (ACE), which specifically refers to the individual entries in a DACL that define the permissions granted to users or groups. Option B is incorrect as it mislabels the ACE; option C refers to the entire list rather than a single entry, and option D, while related to security, does not pertain to permissions directly.