Role-Based Access Control (RBAC) CSE Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In role-based access control, what is the primary reason for assigning permissions to roles rather than to individual users?

   • ATo allow users to define their own permissions based on their current needs.
   • BTo eliminate the need for authentication in the access control process.
   • CTo ensure that each user has a unique set of permissions tailored to their specific tasks.
   • DTo simplify administration by grouping permissions into logical sets that can be assigned to many users consistently.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a 'Database Backup Operator' role that includes permissions to read all databases, write to the backup storage, and delete old backups. An audit reveals that the role is over-privileged because operators only need to initiate backups and manage the backup storage, not read database contents. Which change best reduces the risk?

   • ARemove the database read permission from the role, keeping only backup-initiation and backup-storage management permissions.
   • BKeep the read permission but require a second operator to approve each backup.
   • CSplit the role into two roles: one for backup initiation and one for backup storage management.
   • DAssign the read permission only to senior operators.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A large enterprise uses a cloud RBAC system with a deep role hierarchy. A security audit reveals that a user assigned to a senior role has inherited permissions from multiple junior roles, including a permission that conflicts with another permission they hold, violating separation of duties. The enterprise wants to maintain the hierarchy for operational efficiency but must eliminate the conflict. Which approach best resolves the issue?

   • AAdd a deny rule that overrides the inherited permission for that specific user.
   • BRemove the conflicting permission from the junior role and create a separate role for users who need that permission, ensuring no user holds both roles.
   • CRemove the senior role from the user and assign them only the junior roles.
   • DKeep the hierarchy but document that the conflict is accepted as a business exception.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a cloud RBAC system, what does a role assignment do?

   • AIt grants the user the permissions that are associated with that role.
   • BIt creates a new user account in the cloud directory.
   • CIt defines the actions that can be performed on a specific resource.
   • DIt removes all permissions from a user's account.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An organization is implementing RBAC for a change-management process. They need to ensure that the person who approves a change is different from the person who implements it. Which RBAC configuration enforces this?

   • AAssign the approve permission to a role and the implement permission to the same role, but rely on the change-management application to enforce the separation.
   • BCreate two roles: 'Change Approver' and 'Change Implementer', and ensure no user is assigned to both roles.
   • CCreate a role hierarchy where the 'Change Approver' role inherits from the 'Change Implementer' role.
   • DCreate a single role 'Change Manager' that includes both approve and implement permissions, and assign it to all managers.
   Reveal Solution Discussion Select an answer first