QuestionQ23

Security Principles

Which access-management type uses information about job duties and positions to identify subjects’ clearance levels?

  • A Discretionary
  • B Role-based
  • C Nondiscretionary
  • D Hybrid
  • E Mandatory
Explanation

Role-based access control assigns access according to a subject’s organizational role, which is defined by job duties and position. Permissions and associated access levels are therefore determined by the role rather than individually chosen by an owner.

Community Discussion

No comments yet. Be the first to start the discussion!