Question 30 2.5 pts In Discretionary Access Control (DAC), it is easier to assign permissions on a per-object basis with _X__and on a per subject basis with Y X - ACLS, Y = Roles X - ACLS. Y = Capabilities X = Capabilities. Y - ACLS X = Roles, Y Capabilities Question 31 2.5 pts Why do we call the file descriptor table a capability? It maintains the permissions on a per-object basis. It contains the subject's permissions for the file It is stored in kernel memory and thus secure from manipulation by user processes It is hard to forge, unlike ACLs