CV0-002 · Question #283
A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?
The correct answer is B. RBAC. A software solution requires deployment with the most granular access level to precisely control user permissions.
Question
A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?
Options
- AGroup
- BRBAC
- CFile-based
- DLDAP
How the community answered
(22 responses)- B91% (20)
- C5% (1)
- D5% (1)
Why each option
A software solution requires deployment with the most granular access level to precisely control user permissions.
Group-based access control grants permissions to groups of users, meaning all users in a group receive the same permissions, which is less granular than defining permissions for specific roles or actions on individual resources.
Role-Based Access Control (RBAC) allows for highly granular access control by defining permissions based on roles, and then assigning users to those roles. This method allows administrators to define specific actions (read, write, delete) that can be performed on specific resources or features within the software solution, meeting the requirement for the "most granular access level."
File-based access control typically applies permissions at the file or folder level within an operating system, which is not granular enough for controlling specific functions or resources within a complex software solution itself.
LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing and maintaining distributed directory information services, primarily for authentication and directory lookups, but it is not an access control method itself for defining granular permissions within an application.
Concept tested: Granular access control methods
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.