CISSP · Question #1033
What is the MOST significant benefit of role-based access control (RBAC)?
The correct answer is A. Reduction in authorization administration overhead. The most significant benefit of role-based access control (RBAC) is the reduction in authorization administration overhead. RBAC is a type of access control that assigns permissions to roles, rather than individual users. A role is a logical grouping of users that share the…
Question
What is the MOST significant benefit of role-based access control (RBAC)?
Options
- AReduction in authorization administration overhead
- BReduces inappropriate access
- CManagement of least privilege
- DMost granular form of access control
How the community answered
(28 responses)- A93% (26)
- B4% (1)
- C4% (1)
Explanation
The most significant benefit of role-based access control (RBAC) is the reduction in authorization administration overhead. RBAC is a type of access control that assigns permissions to roles, rather than individual users. A role is a logical grouping of users that share the same functions or responsibilities within an organization. A permission is a right or privilege to access or perform a certain action on a resource. RBAC reduces the authorization administration overhead, as it simplifies the management and maintenance of access rights. Instead of granting or revoking permissions to each user individually, RBAC allows the administrator to assign or remove users from roles, and assign or remove permissions from roles. RBAC also reduces the errors and inconsistencies in the authorization process, as it enforces a consistent and standardized access policy across the organization. RBAC may also provide other benefits, such as reducing inappropriate access, managing least privilege, or providing a granular form of access control, but these are not the most significant or unique benefits of RBAC, as they can also be achieved by other types of access control, such as discretionary access control (DAC) or mandatory access
Topics
Community Discussion
No community discussion yet for this question.