Exam CV1-003 topic 1 question 49 discussion

Actual exam question from CompTIA's CV1-003

Question #: 49
Topic #: 1

A cloud administrator is reviewing the authentication and authorization mechanism implemented within the cloud environment. Upon review, the administrator discovers the sales group is part of the finance group, and the sales team members can access the financial application. Single sign-on is also implemented, which makes access much easier.
Which of the following access control rules should be changed?

A. Discretionary-based
B. Attribute-based
C. Mandatory-based
D. Role-based

Show Suggested Answer

Suggested Answer: D 🗳️
Reference:
https://www.ekransystem.com/en/blog/rbac-vs-abac

by MeisAdriano at Feb. 23, 2024, 9:55 p.m.

Comments

Submit Cancel

MeisAdriano

1 year, 4 months ago

Selected Answer: B

The issue with resource allocation refers to the improper granting of permissions or access rights to specific users, groups, or roles within a system or application. In the described context, the problem with resource allocation is highlighted by the fact that members of the sales team have gained access to the financial application, despite not being authorized to do so. This problem may stem from improperly configured permissions within the cloud environment.

upvoted 1 times

...