Exam CAS-005 topic 1 question 29 discussion

To enforce the organization's requirements with minimal impact to systems and resources, Option A seems to be the most suitable choice: A. A tagging strategy in which all resources are assigned a tag based on the data classification type, and a system that enforces attribute-based access control Here's why: Tagging Strategy: Assigning tags based on data classification types allows for flexible and scalable management of resources. Attribute-Based Access Control (ABAC): This approach can dynamically enforce access policies based on attributes, such as user roles, data classification, and other contextual information. It supports fine-grained access control and can be integrated with SSO federation to map users into groups. This method ensures that each group can only access systems that process and store data at the classification assigned to the group, aligning with the organization's data classification policy.