200-201 Question 66
Single answerA company uses a role-based access control (RBAC) model for managing access to its internal systems. The cybersecurity team discovers that a junior analyst has access to modify firewall rules, a task they are not authorized to perform based on their role. What is the most likely cause of this issue?
- A
The junior analyst was assigned permissions that exceed their role requirements.
- B
The company does not use multi-factor authentication for accessing the firewall management console.
- C
The RBAC model is not configured to enforce the principle of least privilege.
- D
The firewall rules were incorrectly configured by the senior administrator.
Show answer and explanation
Correct answer: A
Explanation
In a role-based access control (RBAC) model, permissions are assigned based on roles aligned to job functions. If a user is assigned permissions exceeding their role requirements, it creates a security risk by allowing unauthorized actions. This issue indicates mismanagement of RBAC policies, specifically a failure to properly define or enforce role-specific permissions.
- A. Correct.
This is the correct answer because assigning permissions that exceed role requirements violates the RBAC principle and can lead to unauthorized access.
- B. Incorrect.
While lack of multi-factor authentication is a security concern, it is unrelated to the issue of improper role-based permissions.
- C. Incorrect.
Although enforcing the principle of least privilege is a core concept of RBAC, this option describes a general best practice and is not the specific cause of the issue in this scenario.
- D. Incorrect.
Firewall misconfiguration by the senior administrator is unrelated to the junior analyst’s unauthorized access due to incorrect permissions.