Someone here picked A without explaination. I want to know why A is correct and why D isn't correct.

1. A forensics examiner is attempting to dump password cached in the physical memory of a live system but keeps receiving an error message. Which of the following BEST describes the cause of the error?

A. The examiner does not have administrative privileges to the system

B. The system must be taken offline before a snapshot can be created

C. Checksum mismatches are invalidating the disk image

D. The swap file needs to be unlocked before it can be accessed

2.Joe, an employee, is transferring departments and is providing copies of his files to a network share folder for his previous team to access. Joe is granting read-write-execute permissions to his manager but giving read-only access to the rest of the team. Which of the following access controls is Joe using?

A. FACL

B. DAC

C. ABAC

D. MAC

I feel A is a part of B. I feel the answer should be B, but someone here answered A.