Which of the following access control methods allows task-based controls to determine access?

Study for the CISSP Domain 5 Identity and Access Management Test with flashcards and multiple choice questions. Each question offers hints and explanations. Get ready for success!

Role-Based Access Control (RBAC) is indeed the correct answer because it allows access rights and permissions to be assigned based on the roles that users have within an organization. In this model, roles are defined according to job functions, and access to resources is granted based on the tasks associated with those roles. By doing this, RBAC streamlines management of user permissions and aligns access controls with the specific responsibilities defined by those roles.

This method is particularly efficient because it reduces the need for individual access management for each user, as permissions are centrally managed through roles. For example, if a user takes on a new role within an organization, their access rights can quickly be adjusted by assigning them to that role rather than altering permissions on a user-by-user basis.

In contrast, the other access control methods differ significantly in their approaches. Mandatory Access Control (MAC) relies on a centralized authority to define access policies based on multiple classifications for individuals and resources, rather than on user-defined roles. Attribute-Based Access Control (ABAC) uses policies that combine various attributes about users, resources, and the environment to determine access, making it more flexible but also potentially more complex. Time-Based Access Control is typically focused on restricting access during specific times or time periods, which

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy