Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam CISSP topic 1 question 61 discussion

Actual exam question from ISC's CISSP
Question #: 61
Topic #: 1
[All CISSP Questions]

What is the MOST significant benefit of role-based access control (RBAC)?

  • A. Reduces inappropriate access
  • B. Management of least privilege
  • C. Most granular form of access control
  • D. Reduction in authorization administration overhead
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Cww1
Highly Voted 1 year, 7 months ago
given answer is correct
upvoted 12 times
jackdryan
1 year ago
D is correct
upvoted 2 times
...
...
Bach1968
Highly Voted 10 months, 1 week ago
Selected Answer: B
The MOST significant benefit of role-based access control (RBAC) is: B. Management of least privilege. RBAC is a widely adopted access control model that provides several benefits, but the management of least privilege is considered its most significant advantage. RBAC ensures that users are assigned only the privileges necessary to perform their specific job functions, known as the principle of least privilege. By implementing RBAC, organizations can minimize the risk of inappropriate access and unauthorized actions. Users are granted access rights based on predefined roles that align with their responsibilities, eliminating unnecessary privileges that could be exploited. This helps to reduce the attack surface and potential impact of security incidents. While RBAC also offers other benefits, such as reducing administrative overhead and providing a structured and scalable access control framework, the management of least privilege is considered the most significant because it directly addresses the principle of granting users the minimal privileges required to perform their tasks effectively and securely. ps. do not forget segregation of duties
upvoted 7 times
...
CCNPWILL
Most Recent 3 weeks, 4 days ago
Selected Answer: B
B. having a role will put the allowed priv already for the user. easier to manage.
upvoted 1 times
...
73f8ac3
1 month, 1 week ago
Selected Answer: D
D RBAC does not guarantee you give the least privilege. It allows you not to spend too much time doing it. Least priviledge is an objective, but RBAC does not guarantee it !
upvoted 1 times
...
Hongjun
2 months, 1 week ago
Selected Answer: B
Refer to CISSP 9th official guide chapter 14 page 157. RABC helps to implement of the 'least privilege ' policy.
upvoted 2 times
...
OriginalDragon
3 months ago
Selected Answer: D
Going with D here, managing least privilege is a subset of admin overhead
upvoted 2 times
dm808
1 month, 2 weeks ago
100% agree ! and all access controls should manage least privilege.. either by design or by admin overhead
upvoted 1 times
...
...
Soleandheel
5 months, 1 week ago
B. Management of least privilege
upvoted 1 times
...
Zonas
5 months, 2 weeks ago
I choose D
upvoted 1 times
...
homeysl
7 months ago
Selected Answer: B
B is the correct answer
upvoted 1 times
...
Moose01
7 months, 1 week ago
D. management and admin overhead work is reduced by put placing ten thousand users into one group if they all need to have access to a particular object. RBAC is not granular access level, that is where DAC comes into play providing special access to a specific user or group granted by the data owner. D is the correct answer.
upvoted 3 times
...
Okwy
8 months, 3 weeks ago
Selected Answer: B
Page 684 of OSG 9th edition
upvoted 3 times
...
HughJassole
10 months, 3 weeks ago
D. This question asks for the most significant benefit or RBAC. I searched a lot and didn't find a single site that listed anything besides D is a benefit. A sounds good but I didn't see it anywhere, so D.
upvoted 1 times
...
Azurefox79
1 year, 1 month ago
Selected Answer: B
Its B. You are taking a security certification so, while D is a benefit, its not the BEST.
upvoted 2 times
...
JohnyDal
1 year, 3 months ago
Selected Answer: D
Should be D because it mentions about the benefit (not an objective) of the RBAC. An objective of the RBAC is to utilize the least privilege principle. And "Think like a manager" also requires us to think about the managerial benefit first which is reducing admin overhead by utilizing abstraction and the principle of least priv. So D
upvoted 2 times
...
Dee83
1 year, 3 months ago
B. Management of least privilege The most significant benefit of role-based access control (RBAC) is the management of least privilege. Least privilege is the practice of limiting access to the minimum set of privileges required to perform a specific job or task. In RBAC, users are assigned roles, and roles are assigned the least set of privileges necessary to perform their functions. This approach helps to prevent inappropriate access by ensuring that users are only able to access the resources and perform the actions that they need to do their jobs. Additionally, it makes it easier to manage access control by reducing the need to manage permissions at the individual user level
upvoted 2 times
...
rajkamal0
1 year, 4 months ago
Selected Answer: D
Best answer is D, as this question is about benefit of RBAC.
upvoted 3 times
...
somkiatr
1 year, 4 months ago
Selected Answer: D
Should be D because it mentions about benefit (not an objective) of the RBAC. An objective of the RBAC is to utilized least privilege principle.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...