A network administrator is configuring access control for the sales department which has high employee turnover. Which of the following is BEST suited when assigning user rights to individuals in…

The correct answer is B. Group based privileges. High employee turnover means users are frequently added and removed. Group-based privileges allow the administrator to define permissions once at the group level; onboarding a new employee simply requires adding them to the group, and offboarding requires removing them from it…

Security operations

Question

A network administrator is configuring access control for the sales department which has high employee turnover. Which of the following is BEST suited when assigning user rights to individuals in the sales department?

Options

ATime of day restrictions
BGroup based privileges
CUser assigned privileges
DDomain admin restrictions

How the community answered

(51 responses)

A
6% (3)
B
88% (45)
C
4% (2)
D
2% (1)

Explanation

High employee turnover means users are frequently added and removed. Group-based privileges allow the administrator to define permissions once at the group level; onboarding a new employee simply requires adding them to the group, and offboarding requires removing them from it. Individual (user-assigned) privileges would require manually configuring and revoking rights for each employee, which is error-prone and administratively burdensome at scale. Time-of-day restrictions and domain admin restrictions do not address the core challenge of managing access for a frequently changing workforce.

Topics

#group-based access#role-based access control#user rights management#high turnover

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice