nerdexam
(ISC)2

SSCP · Question #86

Which access model is most appropriate for companies with a high employee turnover?

The correct answer is A. Role-based access control. Role-Based Access Control (RBAC) is most suitable for organizations with high employee turnover because permissions are assigned to roles (e.g., 'Accountant', 'Manager'), not to individuals. When a new employee joins, they are simply assigned the appropriate role and inherit…

Submitted by viktor_hu· Apr 18, 2026Access Controls

Question

Which access model is most appropriate for companies with a high employee turnover?

Options

  • ARole-based access control
  • BMandatory access control
  • CLattice-based access control
  • DDiscretionary access control

How the community answered

(44 responses)
  • A
    75% (33)
  • B
    14% (6)
  • C
    7% (3)
  • D
    5% (2)

Explanation

Role-Based Access Control (RBAC) is most suitable for organizations with high employee turnover because permissions are assigned to roles (e.g., 'Accountant', 'Manager'), not to individuals. When a new employee joins, they are simply assigned the appropriate role and inherit all associated permissions. When they leave, removing the role revokes all access at once. This reduces administrative overhead significantly compared to managing individual permissions (DAC) or rigid sensitivity labels (MAC/lattice).

Topics

#Access Control Models#Role-Based Access Control (RBAC)#User Lifecycle Management

Community Discussion

No community discussion yet for this question.

Full SSCP Practice