How does RBAC help enforce the principle of least privilege?

By allowing administrators to define roles with only the specific permissions needed for a job function.

By using a single role that contains all permissions and assigning it to all users.

By automatically granting all users the same set of permissions.

By requiring users to request permissions every time they need to perform an action.

Which of the following correctly lists the key components of role-based access control (RBAC)?

Identities, resources, actions, and conditions

Users, roles, permissions, and sessions

Subjects, objects, operations, and constraints

Users, groups, permissions, and policies

A company has a policy that all database administrators must be part of the 'DBAdmins' group, and the group is assigned the 'Database Admin' role. A new DBA joins the company. What is the most efficient way to grant the new DBA the required access?

Grant the new DBA the same permissions as the group by copying the role's permissions.

Add the new DBA to the 'DBAdmins' group.

Create a new group for the new DBA and assign the role to that group.

Assign the 'Database Admin' role directly to the new DBA.

A cloud administrator is creating a custom role for a team that only needs to start and stop virtual machines, but must not be able to delete them or change their configuration. Which permission set should the role include?

Microsoft.Compute/virtualMachines/write and Microsoft.Compute/virtualMachines/delete

Microsoft.Compute/virtualMachines/*

Microsoft.Compute/virtualMachines/read and Microsoft.Compute/virtualMachines/start/action

Microsoft.Compute/virtualMachines/start/action and Microsoft.Compute/virtualMachines/restart/action

A cloud administrator is designing RBAC roles for a new project. The team has 10 developers, 2 QA engineers, and 1 project manager. The developers need read/write access to a code repository and read access to a build pipeline. The QA engineers need read access to the code repository and read/write access to test environments. The project manager needs read access to everything for reporting. What is the most efficient and least-privilege role design?

Create three roles: Developer, QA, and Project Manager, each with the exact permissions needed for that job function.

Create one role per individual user, assigning each user the exact permissions they personally need.

Create two roles: one for developers and one for QA, and give the project manager direct permissions.

Create a single role with all permissions and assign it to everyone.

EC-CouncilCloud Security Essentials

Domain 2Objective 2

Role-Based Access Control (RBAC) CSE Practice Questions (Page 9)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

48questions here

10free pages

10concepts

Questions 41–45

41foundation · easy
How does RBAC help enforce the principle of least privilege?
Select an answer first
42foundation · easy
Which of the following correctly lists the key components of role-based access control (RBAC)?
Select an answer first
43application · medium
A company has a policy that all database administrators must be part of the 'DBAdmins' group, and the group is assigned the 'Database Admin' role. A new DBA joins the company. What is the most efficient way to grant the new DBA the required access?
Select an answer first
44application · medium
A cloud administrator is creating a custom role for a team that only needs to start and stop virtual machines, but must not be able to delete them or change their configuration. Which permission set should the role include?
Select an answer first
45application · medium
A cloud administrator is designing RBAC roles for a new project. The team has 10 developers, 2 QA engineers, and 1 project manager. The developers need read/write access to a code repository and read access to a build pipeline. The QA engineers need read access to the code repository and read/write access to test environments. The project manager needs read access to everything for reporting. What is the most efficient and least-privilege role design?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.