E10-001 · Question #44
In the context of information security, which attribute other than individual identity and group membership can be used to restrict unauthorized access?
The correct answer is A. Role. In secure storage environments, root or administrator privileges for a specific device are not granted to every user. Instead, role-based access control (RBAC) is deployed to assign necessary privileges to users, enabling them to perform their roles. A role may represent a job…
Question
In the context of information security, which attribute other than individual identity and group membership can be used to restrict unauthorized access?
Options
- ARole
- BCryptography
- CWorld Wide Name
- DHost network address
How the community answered
(37 responses)- A76% (28)
- B14% (5)
- C8% (3)
- D3% (1)
Explanation
In secure storage environments, root or administrator privileges for a specific device are not granted to every user. Instead, role-based access control (RBAC) is deployed to assign necessary privileges to users, enabling them to perform their roles. A role may represent a job function, for example, an administrator. Privileges are associated with the roles and users acquire these privileges based upon their roles. It is also advisable to consider administrative controls, such as "separation of duties," when defining data center procedures.
Topics
Community Discussion
No community discussion yet for this question.