GSLC · Question #59
You work as a Network Administrator for PassGuide Inc. Adam, your assistant, wants to perform a backup of the server. Which of the following authentication methods will you assign to Adam?
The correct answer is A. RBAC. Role-Based Access Control (RBAC) is the appropriate method to grant Adam the specific permissions needed to perform backups without granting broader administrative rights.
Question
You work as a Network Administrator for PassGuide Inc. Adam, your assistant, wants to perform a backup of the server. Which of the following authentication methods will you assign to Adam?
Options
- ARBAC
- BOrBAC
- CDAC
- DNAC
How the community answered
(42 responses)- A93% (39)
- C5% (2)
- D2% (1)
Why each option
Role-Based Access Control (RBAC) is the appropriate method to grant Adam the specific permissions needed to perform backups without granting broader administrative rights.
RBAC assigns permissions to users based on their designated role within the organization. In Windows environments, the built-in Backup Operators role grants exactly the rights needed to back up and restore files without requiring full administrative privileges. This follows the principle of least privilege by scoping access to only what the role requires.
OrBAC (Organization-Based Access Control) is an extended model that introduces the concept of organizations and contexts, and is not a standard Windows or common enterprise access control mechanism for this use case.
DAC (Discretionary Access Control) allows resource owners to set permissions at their own discretion, which does not systematically address granting a user backup-specific privileges across a server.
NAC (Network Access Control) governs whether devices can connect to the network, not what system-level tasks an authenticated user can perform on a server.
Concept tested: Role-Based Access Control for least privilege assignment
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups
Topics
Community Discussion
No community discussion yet for this question.