CompTIA Project+ (PK0-005)Basics of IT and GovernanceHard
A project involves developing a new online collaboration platform for a highly regulated industry. The platform will store and transmit proprietary intellectual property and client data. The project manager needs to implement a robust access control mechanism that ensures users can only access the specific resources necessary to perform their job functions, and no more. Which access control concept is being emphasized here?
- AAttribute-Based Access Control (ABAC)
- BRole-Based Access Control (RBAC)
- CMandatory Access Control (MAC)
- DDiscretionary Access Control (DAC)
Show answer & explanationAnswer & explanation
Correct answer: B. Role-Based Access Control (RBAC)
Role-Based Access Control (RBAC) is an access control mechanism that grants or denies access to resources based on the roles users have within an organization. This aligns perfectly with ensuring users only access resources necessary for their job functions.
Why the other options are wrong
- A. ABAC grants access based on a set of attributes (user, resource, environment), offering fine-grained control but often more complex to implement and manage than RBAC for job function-based access.
- C. MAC is a highly restrictive access control, typically used in high-security environments, where access decisions are made by a central authority based on security labels.
- D. DAC allows resource owners to grant or deny access, which can be inconsistent and hard to manage in large organizations.
Role-Based Access Control (RBAC)
An access control mechanism where permissions are associated with roles, and users are assigned to appropriate roles based on their job functions. This simplifies management and ensures users only have necessary access.
- Streamlines user access management in large organizations.
- Enforces the principle of least privilege.
- Widely adopted in enterprise environments due to its scalability and manageability.
Memory trick: Roles Rule Resources.