A company wants to ensure employees are allowed to copy files from a virtual desktop during the workday but are restricted during non-working hours. Which of the following security measures should…

Question

Options

• ADigital rights management
• BRole-based access control
• CTime-based access control
• DNetwork access control

• A
  2% (1)
• B
  5% (3)
• C
  91% (51)
• D
  2% (1)

Explanation

Time-based access control (C) is correct because it restricts or grants permissions based on specific time windows - exactly what's needed when access should only be permitted during working hours and blocked outside of them.

Why the distractors are wrong:

• A. Digital rights management (DRM) controls how content is used, shared, or distributed after access - it doesn't restrict when a user can perform actions like copying files.
• B. Role-based access control (RBAC) grants permissions based on a user's job role, not the time of day - all employees with the right role would have access 24/7.
• D. Network access control (NAC) governs which devices can connect to a network (e.g., checking for patches or certificates), not when an authenticated user can copy files.

Memory tip: Think of Time-based = Clock-based. If the restriction is tied to a schedule (working hours, shift times, business days), the answer is time-based access control - just like a store that's open only from 9–5.

No community discussion yet for this question.