nerdexam
(ISC)2

CISSP · Question #1033

What is the MOST significant benefit of role-based access control (RBAC)?

The correct answer is A. Reduction in authorization administration overhead. The most significant benefit of role-based access control (RBAC) is the reduction in authorization administration overhead. RBAC is a type of access control that assigns permissions to roles, rather than individual users. A role is a logical grouping of users that share the…

Submitted by klara.se· Mar 5, 2026Identity and Access Management (IAM)

Question

What is the MOST significant benefit of role-based access control (RBAC)?

Options

  • AReduction in authorization administration overhead
  • BReduces inappropriate access
  • CManagement of least privilege
  • DMost granular form of access control

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • C
    4% (1)

Explanation

The most significant benefit of role-based access control (RBAC) is the reduction in authorization administration overhead. RBAC is a type of access control that assigns permissions to roles, rather than individual users. A role is a logical grouping of users that share the same functions or responsibilities within an organization. A permission is a right or privilege to access or perform a certain action on a resource. RBAC reduces the authorization administration overhead, as it simplifies the management and maintenance of access rights. Instead of granting or revoking permissions to each user individually, RBAC allows the administrator to assign or remove users from roles, and assign or remove permissions from roles. RBAC also reduces the errors and inconsistencies in the authorization process, as it enforces a consistent and standardized access policy across the organization. RBAC may also provide other benefits, such as reducing inappropriate access, managing least privilege, or providing a granular form of access control, but these are not the most significant or unique benefits of RBAC, as they can also be achieved by other types of access control, such as discretionary access control (DAC) or mandatory access

Topics

#Role-Based Access Control (RBAC)#Access control models#Authorization administration#Least privilege

Community Discussion

No community discussion yet for this question.

Full CISSP Practice