Exam CAS-004 topic 1 question 528 discussion

Actual exam question from CompTIA's CAS-004

Question #: 528
Topic #: 1

A company implements the following access control methodology based on the following data classifications:

The Chief Information Security Officer (CISO) wants to implement an additional layer of access control based on the geographic location of the underlying system that processes and stores data. The additional layer will be added to the existing access control system. Which of the following components must be implemented to achieve these goals? (Choose two.)

A. Tagging
B. Attribute-based access control
C. Role-based access control
D. Groups
E. Tokenization
F. Digital rights management

Show Suggested Answer

Suggested Answer: AB 🗳️

by SangSang at Aug. 22, 2024, 11:30 p.m.

Comments

Submit Cancel

SangSang

Highly Voted 11 months, 2 weeks ago

Selected Answer: AB

"...access control based on the geographic location…" => access control decisions based on attributes of the user, the resource, and the environment ==> ABAC ABAC is handling the client-side to see which user's attribute is, then map with the destination resource. So we need to tag the group of servers or resources that the correct user can connect to => Tagging E.g. A user connect from US location can reach out all resource with the US tags, while user connected from EU only see the resources with EU tags

upvoted 5 times

...