Match each Linux access control mechanism to its description.
Drag a concept onto its matching description — or click a concept then click the description.
Traditional file permissions (owner/group/other)
Fine-grained permissions for users/groups
Mandatory access control with policies
Path-based mandatory access control
Default permission mask for new files
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
DAC: File owners set permissions for their own files.
Correct matches: DAC relates to owner-set permissions; MAC involves system-wide policy enforcement; RBAC uses roles; ACLs extend permissions to multiple users/groups. Common confusions include swapping DAC and MAC definitions, or confusing DAC with RBAC.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
DAC: File owners set permissions for their own files.
Why this is correct
DAC (Discretionary Access Control) allows file owners to control access to their own files.
MAC: System-wide security policy enforced by the kernel, e.g., SELinux.
Why this is correct
MAC (Mandatory Access Control) uses a system-wide policy enforced by the kernel, such as SELinux.
RBAC: Access is granted based on user roles and responsibilities.
Why this is correct
RBAC (Role-Based Access Control) grants access based on a user's role within an organization.
ACL: Lists specifying permissions for multiple users and groups for a resource.
Why this is correct
Access Control Lists (ACL) provide finer-grained permissions for multiple users/groups.
DAC: Access is granted based on user roles.
Why it's wrong here
Incorrect — this describes RBAC, not DAC.
MAC: File owners set permissions for their own files.
Why it's wrong here
Incorrect — this describes DAC, not MAC.
Quick reference
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Learn chapter
Linux Fundamentals and History
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Linux
Linux is an open-source operating system that manages computer hardware and software, widely used in servers, desktops, and embedded systems.
About these practice questions
This XK0-006 question is part of Courseiva's 979-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This XK0-006 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the XK0-006 exam.