CV0-003 · Question #283
A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?
The correct answer is B. RBAC. Role-Based Access Control (RBAC) provides the most granular access management by tying specific permissions to defined roles and assigning those roles to users, enabling precise control over what each user can do.
Question
A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?
Options
- AGroup
- BRBAC
- CFile-based
- DLDAP
How the community answered
(16 responses)- B88% (14)
- C6% (1)
- D6% (1)
Why each option
Role-Based Access Control (RBAC) provides the most granular access management by tying specific permissions to defined roles and assigning those roles to users, enabling precise control over what each user can do.
Group-based access assigns a shared set of permissions to all members of a group, which is coarser than RBAC because it does not differentiate access by functional role or allow fine-grained permission scoping within a group.
RBAC defines roles with precisely scoped permissions and assigns users to those roles, allowing administrators to enforce least-privilege access at a fine-grained level across users, resources, and actions - providing more specificity than flat group membership, file-level controls, or directory protocols alone.
File-based access control governs permissions at the individual file or resource level and does not provide a structured, system-wide framework for defining and managing granular user access across an entire application.
LDAP is a directory service protocol used for storing and querying user and group information, not an access control enforcement mechanism capable of independently defining or applying granular permissions.
Concept tested: Role-Based Access Control for granular permission assignment
Source: https://csrc.nist.gov/projects/role-based-access-control
Topics
Community Discussion
No community discussion yet for this question.