Question: what is the difference between discretionary and mandatory access control?
Answer: In discretionary access control permissions are set usually by the resource owner. In mandatory access control permissions are set by fixed rules based on policies and cannot be overridden by users.