nerdexam
GIAC

GSLC · Question #379

Which of the following options is an approach to restricting system access to authorized users?

The correct answer is C. RBAC. Role-Based Access Control (RBAC) is the access control model specifically designed to restrict system access by assigning permissions to roles and then assigning roles to authorized users.

Security Architecture & Engineering

Question

Which of the following options is an approach to restricting system access to authorized users?

Options

  • AMIC
  • BMAC
  • CRBAC
  • DDAC

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (35)

Why each option

Role-Based Access Control (RBAC) is the access control model specifically designed to restrict system access by assigning permissions to roles and then assigning roles to authorized users.

AMIC

MIC (Mandatory Integrity Control) is a Windows mechanism using integrity levels to prevent lower-integrity processes from modifying higher-integrity objects - it is not a general access restriction model for system users.

BMAC

MAC (Mandatory Access Control) restricts access based on security labels and classifications set by a central authority, not by user roles, making it a different model from what the question describes.

CRBACCorrect

RBAC restricts system access by grouping permissions into roles that reflect job functions, and then assigning users to those roles, ensuring only authorized users with the correct role can access specific resources. This directly satisfies the requirement of restricting access to authorized users because access is granted by role membership rather than individual identity. RBAC is widely adopted in enterprise environments precisely because it scales access management by job function rather than per-user permission assignment.

DDAC

DAC (Discretionary Access Control) allows resource owners to grant access at their own discretion, which does not strictly enforce centralized restriction of access to only authorized users.

Concept tested: Role-Based Access Control (RBAC) model definition

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview

Topics

#RBAC#access control models#authorization#identity management

Community Discussion

No community discussion yet for this question.

Full GSLC Practice