CISSP – Information Systems Security Architecture Professional (ISSAP) — Question 70

Which of the following is an entry in an object's discretionary access control list (DACL) that grants permissions to a user or group?

Answer options

• A. Access control entry (ACE)
• B. Discretionary access control entry (DACE)
• C. Access control list (ACL)
• D. Security Identifier (SID)

Correct answer: A

Explanation

The correct answer is A, Access control entry (ACE), which specifically represents an entry in the DACL that defines the permissions for a user or group. Option B, Discretionary access control entry (DACE), is not a recognized term in access control terminology. Option C, Access control list (ACL), refers to the entire list rather than a single entry, and option D, Security Identifier (SID), is a unique identifier for a user or group, not an entry that grants permissions.