nerdexam
CompTIA

CV0-003 · Question #283

A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

The correct answer is B. RBAC. Role-Based Access Control (RBAC) provides the most granular access management by tying specific permissions to defined roles and assigning those roles to users, enabling precise control over what each user can do.

Security

Question

A software solution must be deployed based on the most granular access level. Which of the following methods should be used to meet the requirements?

Options

  • AGroup
  • BRBAC
  • CFile-based
  • DLDAP

How the community answered

(16 responses)
  • B
    88% (14)
  • C
    6% (1)
  • D
    6% (1)

Why each option

Role-Based Access Control (RBAC) provides the most granular access management by tying specific permissions to defined roles and assigning those roles to users, enabling precise control over what each user can do.

AGroup

Group-based access assigns a shared set of permissions to all members of a group, which is coarser than RBAC because it does not differentiate access by functional role or allow fine-grained permission scoping within a group.

BRBACCorrect

RBAC defines roles with precisely scoped permissions and assigns users to those roles, allowing administrators to enforce least-privilege access at a fine-grained level across users, resources, and actions - providing more specificity than flat group membership, file-level controls, or directory protocols alone.

CFile-based

File-based access control governs permissions at the individual file or resource level and does not provide a structured, system-wide framework for defining and managing granular user access across an entire application.

DLDAP

LDAP is a directory service protocol used for storing and querying user and group information, not an access control enforcement mechanism capable of independently defining or applying granular permissions.

Concept tested: Role-Based Access Control for granular permission assignment

Source: https://csrc.nist.gov/projects/role-based-access-control

Topics

#RBAC#granular access control#identity management#least privilege

Community Discussion

No community discussion yet for this question.

Full CV0-003 Practice