Role-Based Access Control (RBAC) CSE Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   What is the key difference between RBAC and discretionary access control (DAC)?

   • AIn DAC, the resource owner decides who can access the resource, while in RBAC, access is determined by the roles assigned to users.
   • BIn DAC, permissions are assigned to roles, while in RBAC, permissions are assigned to individual users.
   • CIn DAC, access is based on security labels, while in RBAC, access is based on user identity.
   • DIn DAC, access is controlled by a central authority, while in RBAC, users control access to their own resources.
   Reveal Solution Discussion Select an answer first
2. 47foundation · easy

   What is a recommended practice for managing RBAC roles in a cloud environment to maintain security and compliance?

   • ADocument the purpose of each role and review role assignments periodically.
   • BUse a single global role for all cloud resources to simplify management.
   • CAllow users to create their own roles to speed up access provisioning.
   • DAvoid changing roles once they are created to maintain stability.
   Reveal Solution Discussion Select an answer first
3. 48foundation · easy

   How are permissions associated with roles in a typical cloud RBAC system?

   • APermissions are attached to individual users, and roles are used only for reporting purposes.
   • BPermissions are added directly to a role definition, and any user assigned to that role receives those permissions.
   • CPermissions are defined at the resource level and are automatically inherited by all roles.
   • DPermissions are stored in a central policy that overrides role assignments.
   Reveal Solution Discussion Select an answer first