100-160 Question 29
Select 2A company has implemented a new access management policy that requires employees to use their company-issued ID badges to enter different departments. Additionally, employees can only access specific systems and data based on their job roles. Which access management principles are being applied in this scenario?
- A
Least Privilege
- B
Role-Based Access Control (RBAC)
- C
Separation of Duties
- D
Multi-Factor Authentication (MFA)
- E
Time-Based Access Control
Show answer and explanation
Correct answers: A, B
Explanation
The scenario demonstrates principles of Least Privilege, where employees are granted only the access necessary for their job roles, and Role-Based Access Control (RBAC), where access permissions are assigned based on roles. These principles help ensure that access is managed securely and appropriately within the organization.
- A. Correct.
Correct: Least privilege ensures that employees only have the minimum level of access necessary for their job roles, which aligns with the scenario's restriction of system and data access.
- B. Correct.
Correct: Role-Based Access Control (RBAC) assigns access based on employees' job roles, which is explicitly described in the scenario.
- C. Incorrect.
Incorrect: Separation of duties is about dividing tasks among multiple individuals to reduce the risk of fraud or error. This is not mentioned in the scenario.
- D. Incorrect.
Incorrect: Multi-Factor Authentication (MFA) involves using multiple methods to verify identity, such as passwords and biometrics. The scenario does not describe MFA.
- E. Incorrect.
Incorrect: Time-Based Access Control restricts access to resources based on specific time windows, which is not relevant to the scenario.