Role-Based Access Control (RBAC) CSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization has a cloud environment with three teams: Developers, QA, and DevOps. All three teams need read access to a shared logging bucket. Developers also need write access to application logs, and DevOps needs write access to both application and infrastructure logs. The organization wants to minimize role duplication. Which RBAC design is most efficient?

   • ACreate a single DevOps role and assign Developers and QA to it, then remove write permissions from QA.
   • BCreate three independent roles: Developer, QA, and DevOps, each with the exact permissions needed.
   • CCreate a base Log Reader role, then create Developer Log Writer and DevOps Log Writer roles that inherit from it.
   • DAssign all users the same role that includes read and write permissions to all logs.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company operates in AWS and Azure. They have a team of 'Cloud Operators' who need to manage virtual machines in both clouds. In AWS, they use the 'AmazonEC2FullAccess' managed policy. In Azure, they need an equivalent role. The company wants to minimize the number of custom roles and ensure consistent permissions. Which approach is most appropriate?

   • AUse the Azure built-in role 'Virtual Machine Contributor' for the Azure side and keep the AWS managed policy for AWS.
   • BCreate a custom role in Azure that exactly mirrors the AWS policy JSON.
   • CCreate a custom role in both clouds with the same name and permissions.
   • DAssign the AWS managed policy to the users in Azure as well.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does mandatory access control (MAC) differ from RBAC?

   • AMAC allows resource owners to set permissions, while RBAC uses a central authority.
   • BMAC uses security labels and clearances to enforce access, while RBAC uses roles and permissions.
   • CMAC and RBAC are the same model with different names.
   • DMAC is based on user identity, while RBAC is based on resource ownership.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security administrator needs to enforce a policy where access to a database is granted only to users who hold a specific security clearance, and the decision is made by the system, not by the data owner. Which access control model should the administrator implement?

   • AAttribute-based access control (ABAC)
   • BDiscretionary access control (DAC)
   • CMandatory access control (MAC)
   • DRole-based access control (RBAC)
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An organization uses a role hierarchy where the 'Network Admin' role inherits from the 'Network Viewer' role. A user is assigned only the 'Network Viewer' role. The user needs to temporarily perform a network configuration change for one hour. What is the most appropriate action?

   • AAssign the user the 'Network Admin' role for one hour, then remove it.
   • BCreate a new role that inherits from 'Network Viewer' and includes the configuration permission, then assign it permanently.
   • CAdd the configuration permission directly to the 'Network Viewer' role.
   • DPermanently assign the user the 'Network Admin' role.
   Reveal Solution Discussion Select an answer first