CompTIA Cloud+ Practice Test

Which type of controls allows users to grant or assign rights to objects?

1. Mandatory

2. Discretionary

3. Role-Based

4. Administrative

The correct answer is: Discretionary

Discretionary controls allow users to grant or assign rights to objects, which means that a user who has certain permissions can manage access for others. This type of control is all about user discretion and authority over their own data or resources. For example, in a file sharing environment, a user with the rights to a specific file can decide who else can read, write, or execute that file. This level of control empowers users to manage their own access rights based on their needs, fostering flexibility and user empowerment in managing resources. Mandatory controls, on the other hand, are enforced by the system and cannot be altered by users, meaning that they do not allow users to assign rights. Role-based controls assign permissions based on the user's role within an organization but do not allow individual users to make decisions about access rights, and administrative controls typically involve policies and procedures rather than individual user rights. Therefore, these options do not align with the concept of users having the authority to grant access themselves.