Describe DAC and how it can be used to provide secure access to files. Give an example.

What will be an ideal response?

Dynamic Access Control (DAC) gives you fine-tuned control over shared resources without some of the limitations of traditional file permissions. DAC allows classifying data and assigning permissions by user attributes rather than group memberships. As a simple example, a folder can be classified as belonging to the Accounting Department, making access available only to users whose Department attribute equals Accounting, or the folder can be classified as highly sensitive so that its contents are encrypted automatically, relieving an administrator from having to encrypt it manually.