nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #502

What is the primary benefit of using a rule-based access control (RuBAC) model? ()

The correct answer is B. It provides dynamic access control based on pre-defined rules. Rule-Based Access Control (RuBAC) grants or denies access based on a set of pre-defined rules or conditions-such as time of day, IP address, or network location-rather than static role assignments. This enables dynamic, context-aware access decisions. Option A describes…

Access Controls Concepts

Question

What is the primary benefit of using a rule-based access control (RuBAC) model? ()

Options

  • AIt enables the creator of the object to dictate access
  • BIt provides dynamic access control based on pre-defined rules
  • CAllows the last user to determine access
  • DAllows the CEO or CISO to have ultimate control

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    89% (34)
  • C
    5% (2)
  • D
    3% (1)

Explanation

Rule-Based Access Control (RuBAC) grants or denies access based on a set of pre-defined rules or conditions-such as time of day, IP address, or network location-rather than static role assignments. This enables dynamic, context-aware access decisions. Option A describes Discretionary Access Control (DAC), where the object owner sets permissions. Option C has no standard model equivalent. Option D describes a management hierarchy preference, not an access model. RuBAC's strength is its flexibility and automation through condition-based rules.

Topics

#Access Control#Rule-Based Access Control (RuBAC)#Security Models#Dynamic Access Control

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice