SSCP: Systems Security Certified Practitioner

By ISC · Question Mode

QuestionQ15

VerifiedAccess Controls

In non-discretionary access control through Role Based Access Control (RBAC), a central authority decides which subjects may access particular objects according to the organization’s security policy. The access controls may be based on:

Explanation

Role-Based Access Control assigns permissions according to the role an individual holds in the organization, reflecting the functions and responsibilities associated with that role. A single role can apply to one or multiple individuals.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!