Question 11 · 871 in bank
A network administrator is required to ensure that auditors have read-only access to the system logs, while systems administrators have read and write access to the system logs, and operators have no access to the system logs. The network administrator has configured security groups for each of these functional categories. Which of the following security capabilities will allow the network administrator to maintain these permissions with the LEAST administrative effort?
Show answer
Answer: C
Explanation
C. Role-based access A. Mandatory access control Mandatory access control (MAC) is a security model that relies on a central authority to assign security labels to objects and subjects, and to determine the rules governing access to those objects. It is useful for highly sensitive systems and requires more administrative effort. B. User-based permissions User-based permissions assign permissions to individual users, it can be complex and more administrative effort to maintain when the number of users increases. D. Least privilege Least privilege is a security principle that limits users to the minimum set of permissions they need to perform their tasks. It is a good practice but it's not a security capability and it doesn't provide a way to manage permissions effectively.
Source: Adapted from community discussion — JakeCharles