Which of the following is a preferred model for cloud-based access management?

Role-Based Access Control (RBAC) is less suited to cloud because it relies on static role assignments and struggles to handle the dynamic, context-dependent access scenarios common in multi-cloud and hybrid environments.

Identity-based access ties permissions directly to a specific identity and does not account for contextual factors like resource sensitivity or environmental conditions, making it too coarse for cloud environments.

Access-based is not a standard named access control model, and it does not represent a defined framework with the granularity needed for cloud access management.

ABAC evaluates access requests using attributes of the user (department, clearance), the resource (data classification, owner), the environment (time, location, device posture), and the action being requested. In cloud environments where resources are dynamic, multi-tenant, and accessed from diverse contexts, ABAC's flexibility allows policies to scale without requiring administrators to pre-define every role combination.