220-802 · Question #699
When issuing user permissions for job functions, an administrator should assign:
The correct answer is A. Permissions based on employee's role. Assigning permissions based on an employee's role follows the principle of Role-Based Access Control (RBAC) and the principle of least privilege. Users receive only the access necessary to perform their specific job functions-nothing more. Granting Power User or Administrator…
Question
When issuing user permissions for job functions, an administrator should assign:
Options
- APermissions based on employee's role.
- BThem to the Power User role on the machine.
- CPermissions based on employee's seniority.
- DThem to the Administrator role on the machine.
How the community answered
(34 responses)- A94% (32)
- B3% (1)
- C3% (1)
Explanation
Assigning permissions based on an employee's role follows the principle of Role-Based Access Control (RBAC) and the principle of least privilege. Users receive only the access necessary to perform their specific job functions-nothing more. Granting Power User or Administrator roles to all users gives excessive privileges that expand the attack surface. Basing permissions on seniority has no security rationale and could grant unnecessary access to senior employees or deny necessary access to junior ones.
Topics
Community Discussion
No community discussion yet for this question.