Which of the following access control methodologies can be described BEST as allowing a user the least access based on the jobs the user needs to perform?

The correct answer is B. Role-based. Role-Based Access Control (RBAC) assigns permissions according to a user's defined job role (e.g., HR Analyst, Database Admin). Users receive only the permissions their role requires, directly implementing the principle of least privilege scoped to job function. 'Scope-based'…

Security and disaster recovery

Question

Options

AScope-based
BRole-based
CLocation-based
DRule-based

How the community answered

(36 responses)

A
3% (1)
B
92% (33)
C
6% (2)

Explanation

Role-Based Access Control (RBAC) assigns permissions according to a user's defined job role (e.g., HR Analyst, Database Admin). Users receive only the permissions their role requires, directly implementing the principle of least privilege scoped to job function. 'Scope-based' (A) is not a standard access control model. Location-based access control (C) grants or denies access depending on the user's physical or network location, not their job function. Rule-based access control (D) uses specific conditions or rules (often in ACLs) to govern access and is not inherently tied to job roles.

Topics

#Access Control#Role-Based Access Control#Least Privilege#Security Principles

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice