Role-Based Access Control (RBAC) CSE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a role hierarchy, if a parent role has the permission to 'read' a database and a child role inherits from that parent, what permission does the child role have?

   • AThe child role must be explicitly granted the 'read' permission separately.
   • BThe child role can only read the database if the parent role is also assigned to the user.
   • CThe child role automatically has the 'read' permission on the database.
   • DThe child role has no permission on the database unless it is also assigned to the same user.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary goal of separation of duties (SoD) in RBAC?

   • ATo ensure that no single user has conflicting permissions that could enable fraud or error.
   • BTo ensure that all users have the same level of access to resources.
   • CTo allow users to switch roles easily during a session.
   • DTo reduce the number of roles needed in the system.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A government agency must ensure that access to classified documents is strictly controlled by the system based on the document's classification level and the user's clearance. Additionally, the agency wants to use job roles to simplify management. Which access control model should the agency implement?

   • AImplement ABAC only, with attributes for classification and clearance.
   • BImplement RBAC only, with roles for each clearance level.
   • CImplement MAC with security labels, and use RBAC roles to manage which users get which clearance levels.
   • DImplement DAC, where the document owner decides who can access each document.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is adopting a multi-cloud strategy using AWS and Azure. They want to standardize RBAC role definitions across both providers to simplify management. Which approach is most effective?

   • AUse a third-party identity provider to assign the same role ARN to users in both clouds.
   • BDefine a common set of job-function roles (e.g., Developer, Operator, Auditor) and map each to the equivalent built-in or custom role in each cloud provider.
   • CUse the exact same role name and policy JSON in both AWS and Azure.
   • DCreate separate role definitions for each provider and do not attempt to align them.
   Reveal Solution Discussion Select an answer first
6. 20application · easy

   A cloud administrator is explaining RBAC to a new team member. The team member asks: 'If a user is assigned to a role, what exactly determines what the user can do on a cloud resource?' Which answer is correct?

   • AThe user's job title in the HR system.
   • BThe permissions associated with the role, evaluated against the resource and the action being attempted.
   • CThe user's session duration and login time.
   • DThe user's manager's approval for each action.
   Reveal Solution Discussion Select an answer first