Exam N10-008 topic 1 question 460 discussion

Actual exam question from CompTIA's N10-008

Question #: 460
Topic #: 1

The lack of a formal process to grant network permissions to different profiles of employees and contractors is leading to an increasing number of security incidents. Non-uniform and overly permissive network accesses are being granted. Which of the following would be the MOST appropriate method to improve the security of the environment?

A. Change the default permissions to implicit deny.
B. Configure uniform ACLs to employees and NAC for contractors.
C. Deploy an RDP server to centralize the access to the network.
D. Implement role-based access control.

Show Suggested Answer

Suggested Answer: D 🗳️

by StellarSteve at March 25, 2023, 11:17 a.m.

Comments

Submit Cancel

StellarSteve

Highly Voted 10 months, 1 week ago

Selected Answer: D

The MOST appropriate method to improve the security of the environment, given the described situation, would be to implement role-based access control. Role-based access control (RBAC) is a method that assigns permissions to users based on their role in the organization. This method helps ensure that users only have the permissions they need to perform their job duties, and no more. By implementing RBAC, the organization can enforce a more uniform and controlled access to the network, reducing the risk of security incidents caused by overly permissive network accesses. The other options may help to some extent, but they do not address the underlying problem of non-uniform and overly permissive network accesses being granted.

upvoted 10 times

...