Which of the following access control techniques best gives the security officers the ability to specify and enforce enterprise-specific security policies in a way that maps naturally to an…

Question

Options

• AAccess control lists
• BDiscretionary access control
• CRole-based access control
• DNon-mandatory access control

• B
  4% (1)
• C
  93% (25)
• D
  4% (1)

Explanation

Role-based access control (RBAC) maps directly to an organization's structure by assigning permissions to roles (e.g., "Manager," "Auditor," "HR Analyst") rather than to individuals, making it natural for security officers to enforce enterprise-wide policies at scale.

Why the distractors are wrong:

• A. Access control lists (ACLs) specify permissions per-object per-user, which becomes administratively unmanageable across a large enterprise and doesn't reflect organizational hierarchy.
• B. Discretionary access control (DAC) lets resource owners control access themselves - it delegates policy decisions away from security officers, making centralized enforcement inconsistent.
• D. Non-mandatory access control is not a standard recognized access control model; it's a distractor term designed to confuse with MAC (Mandatory Access Control).

Memory tip: Think "Role = Responsibility." In any org chart, people are hired for a role with defined responsibilities - RBAC simply mirrors that reality in the access control system. If you see words like "enterprise policy," "organizational structure," or "security officers defining rules centrally," that's your signal to pick RBAC.

No community discussion yet for this question.