CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ88

VerifiedIdentity and Access Management (IAM)

An organization wants to implement an authorization mechanism that simplifies assigning different system-access permissions to many users who have similar job responsibilities. Which type of authorization mechanism would be the BEST choice for the organization to implement?

Explanation

Role-based access control (RBAC) associates permissions with job-function roles and assigns users to the appropriate roles. It therefore simplifies permission administration for many users who share the same responsibilities. NIST RBAC overview

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!