200-201 Question 318
Select 3A network administrator is tasked with implementing access control policies for a new system. They need to ensure that users only have permissions necessary for their roles, while also being able to monitor and audit system changes. Which management concepts should the administrator prioritize to achieve this goal?
- A
Least Privilege
- B
Role-Based Access Control (RBAC)
- C
Network Address Translation (NAT)
- D
Change Management
- E
Encryption Standards
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure users have permissions appropriate to their roles, the administrator should apply Least Privilege and Role-Based Access Control (RBAC). To monitor and audit system changes, the administrator should implement Change Management. These concepts together provide a robust framework for securing and managing the system effectively.
- A. Correct.
Ensuring users have only the permissions necessary for their roles aligns with the principle of Least Privilege, which minimizes the risk of unauthorized access or misuse.
- B. Correct.
Role-Based Access Control (RBAC) is designed to assign permissions based on user roles, making it a critical concept for implementing access control policies.
- C. Incorrect.
Network Address Translation (NAT) is a networking concept unrelated to access control, monitoring, or auditing system changes.
- D. Correct.
Change Management is essential for monitoring and auditing system changes, as it provides a structured way to document and control modifications to the system.
- E. Incorrect.
Encryption Standards are important for data security but are not directly linked to access control policies or system monitoring.