What is a significant advantage of Mandatory Access Control over Discretionary Access Control?

What is a significant advantage of Mandatory Access Control over Discretionary Access Control?

• A. MAC policies are easier to configure than DAC.
• B. MAC adds the concept of privileged remote users unavailable in DAC.
• C. MAC policies increase the root user's ability to correct errors.
• D. MAC allows the kernel to control access decisions between objects.

Answer: (D)

Mandatory Access Control (MAC) systems provide a significant advantage over Discretionary Access Control (DAC) by allowing the kernel, or the operating system, to control access decisions between objects consistently and rigorously. Under MAC, access to resources is determined by a central authority based on defined policies, which can take into account user roles, security clearances, and the sensitivity of the information involved. This system imposes strict limitations on how resources can be accessed and shared, creating a coherent security model that reduces the risk of unauthorized access, even if a user has been compromised. Unlike DAC, where users have the discretion to set permissions and share their resources with other users, MAC ensures that access to the data is tightly controlled by pre-defined policies that users cannot alter. This makes MAC particularly beneficial in environments with high security needs, such as government and military applications, where safeguarding sensitive data is paramount. In contrast, the other options do not accurately capture the primary advantage of MAC over DAC. For instance, the configuration complexity or the introduction of privileged remote user concepts doesn't reflect the core strengths of MAC. Instead, the focus remains on the ability of the kernel to manage and enforce security policies effectively, ensuring that access is not left to user discretion, which can vary

Mandatory Access Control (MAC) systems provide a significant advantage over Discretionary Access Control (DAC) by allowing the kernel, or the operating system, to control access decisions between objects consistently and rigorously. Under MAC, access to resources is determined by a central authority based on defined policies, which can take into account user roles, security clearances, and the sensitivity of the information involved.

This system imposes strict limitations on how resources can be accessed and shared, creating a coherent security model that reduces the risk of unauthorized access, even if a user has been compromised. Unlike DAC, where users have the discretion to set permissions and share their resources with other users, MAC ensures that access to the data is tightly controlled by pre-defined policies that users cannot alter. This makes MAC particularly beneficial in environments with high security needs, such as government and military applications, where safeguarding sensitive data is paramount.

In contrast, the other options do not accurately capture the primary advantage of MAC over DAC. For instance, the configuration complexity or the introduction of privileged remote user concepts doesn't reflect the core strengths of MAC. Instead, the focus remains on the ability of the kernel to manage and enforce security policies effectively, ensuring that access is not left to user discretion, which can vary