nerdexam
CompTIA

CV0-002 · Question #283

A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

The correct answer is B. RBAC. A software solution requires deployment with the most granular access level to precisely control user permissions.

Security

Question

A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

Options

  • AGroup
  • BRBAC
  • CFile-based
  • DLDAP

How the community answered

(22 responses)
  • B
    91% (20)
  • C
    5% (1)
  • D
    5% (1)

Why each option

A software solution requires deployment with the most granular access level to precisely control user permissions.

AGroup

Group-based access control grants permissions to groups of users, meaning all users in a group receive the same permissions, which is less granular than defining permissions for specific roles or actions on individual resources.

BRBACCorrect

Role-Based Access Control (RBAC) allows for highly granular access control by defining permissions based on roles, and then assigning users to those roles. This method allows administrators to define specific actions (read, write, delete) that can be performed on specific resources or features within the software solution, meeting the requirement for the "most granular access level."

CFile-based

File-based access control typically applies permissions at the file or folder level within an operating system, which is not granular enough for controlling specific functions or resources within a complex software solution itself.

DLDAP

LDAP (Lightweight Directory Access Protocol) is a protocol used for accessing and maintaining distributed directory information services, primarily for authentication and directory lookups, but it is not an access control method itself for defining granular permissions within an application.

Concept tested: Granular access control methods

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview

Topics

#RBAC#Access control#Granular permissions#Authorization

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice