GSLC · Question #379
Which of the following options is an approach to restricting system access to authorized users?
The correct answer is C. RBAC. Role-Based Access Control (RBAC) is the access control model specifically designed to restrict system access by assigning permissions to roles and then assigning roles to authorized users.
Question
Which of the following options is an approach to restricting system access to authorized users?
Options
- AMIC
- BMAC
- CRBAC
- DDAC
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- C95% (35)
Why each option
Role-Based Access Control (RBAC) is the access control model specifically designed to restrict system access by assigning permissions to roles and then assigning roles to authorized users.
MIC (Mandatory Integrity Control) is a Windows mechanism using integrity levels to prevent lower-integrity processes from modifying higher-integrity objects - it is not a general access restriction model for system users.
MAC (Mandatory Access Control) restricts access based on security labels and classifications set by a central authority, not by user roles, making it a different model from what the question describes.
RBAC restricts system access by grouping permissions into roles that reflect job functions, and then assigning users to those roles, ensuring only authorized users with the correct role can access specific resources. This directly satisfies the requirement of restricting access to authorized users because access is granted by role membership rather than individual identity. RBAC is widely adopted in enterprise environments precisely because it scales access management by job function rather than per-user permission assignment.
DAC (Discretionary Access Control) allows resource owners to grant access at their own discretion, which does not strictly enforce centralized restriction of access to only authorized users.
Concept tested: Role-Based Access Control (RBAC) model definition
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.