Identification, Authentication, and Authorization ECSS Practice Questions (Page 10)

Questions 46–46

1. 46expert · hard

   A university IT department is designing access for a shared research drive. Professors need to read and write their own project files, but should not modify files owned by other professors. Graduate students need read-only access to all project files. The department wants the least administrative overhead while ensuring that permissions are consistently applied. Which approach best meets these requirements?

   • ACreate individual ACLs for each professor and student
   • BUse DAC and let each professor set permissions on their own files
   • CUse MAC with security labels for each file
   • DUse RBAC with roles for 'Professor' and 'Graduate Student', and configure the drive with appropriate permissions for each role
   Reveal Solution Discussion Select an answer first