CERTIFIED-IN-CYBERSECURITY · Question #572
What is the difference between role-based access control (RBAC) and attribute-based access control (ABAC)?
The correct answer is B. RBAC is based on the identity of the user, while ABAC is based on the sensitivity of the resource. RBAC grants access permissions based on a user's assigned role (e.g., 'Manager', 'Auditor', 'Admin'), which reflects their job function or identity within the organization. ABAC is more flexible and grants access based on evaluated attributes - these can include resource…
Question
What is the difference between role-based access control (RBAC) and attribute-based access control (ABAC)?
Options
- ARBAC is based on the sensitivity of the resource, while ABAC is based on the identity of the user.
- BRBAC is based on the identity of the user, while ABAC is based on the sensitivity of the resource.
- CRBAC and ABAC are the same thing.
- DRBAC and ABAC are both types of logical access control
How the community answered
(36 responses)- A3% (1)
- B92% (33)
- C6% (2)
Explanation
RBAC grants access permissions based on a user's assigned role (e.g., 'Manager', 'Auditor', 'Admin'), which reflects their job function or identity within the organization. ABAC is more flexible and grants access based on evaluated attributes - these can include resource attributes (such as data sensitivity or classification level), user attributes, and environmental conditions. The key distinction in this context is that RBAC focuses on who the user is (their role/identity), while ABAC focuses on characteristics of the resource being accessed. Options A and C are incorrect, and while D (both are logical access controls) is technically true, it does not describe a difference between them.
Topics
Community Discussion
No community discussion yet for this question.