Role-Based Access Control (RBAC) CSE Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   In Microsoft Azure, what is the primary mechanism for assigning RBAC permissions?

   • APermissions are granted by attaching a policy document directly to a user account.
   • BUsers are granted permissions by adding them to an Azure Active Directory group.
   • CRole assignments are created by pairing a security principal with a role definition and a scope.
   • DAccess is controlled by placing users in security groups that have network permissions.
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A bank's cloud environment has a 'Payment Processor' role that can create payment transactions and a 'Payment Auditor' role that can view transaction logs. The bank discovers that a user assigned both roles can create a transaction and then alter the audit log to hide it. The bank wants to prevent this without creating a new role. Which change should be made?

   • ARemove the 'Payment Processor' role from the user.
   • BRemove the audit-log modification permission from the 'Payment Auditor' role, leaving only view permissions.
   • CCreate a new 'Payment Supervisor' role that inherits from both roles.
   • DAdd a permission to the 'Payment Processor' role that blocks audit-log access.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   In AWS, what is the equivalent of a role in the context of RBAC?

   • AAn IAM policy is a document that defines permissions and is attached to users.
   • BAn IAM group is a collection of users that share the same permissions.
   • CAn IAM role is a set of permissions that can be assumed by users, services, or applications.
   • DAn IAM user is an identity that can be assigned permissions directly.
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   What is the core principle of role-based access control (RBAC)?

   • APermissions are assigned to roles, and users are then assigned to those roles.
   • BPermissions are assigned directly to individual users based on their identity.
   • CAccess is granted based on the sensitivity labels of the data and the user's clearance level.
   • DEach resource owner decides who can access their resources and with what permissions.
   Reveal Solution Discussion Select an answer first
6. 35application · easy

   A security auditor is reviewing a cloud environment where each file owner can decide who can read their files. The auditor notes that this model does not centralize permission management and can lead to excessive access. Which access control model is the auditor observing?

   • ADiscretionary access control (DAC)
   • BMandatory access control (MAC)
   • CAttribute-based access control (ABAC)
   • DRole-based access control (RBAC)
   Reveal Solution Discussion Select an answer first