Discuss CSA CCZT Exam Topic 1 Question 11

In SaaS and PaaS, which access control method will ZT help define

for access to the features within a service?

AData-based access control (DBAC)

BAttribute-based access control (ABAC)

CRole-based access control (RBAC)

DPrivilege-based access control (PBAC)

Suggested Answer: B

ABAC is an access control method that uses attributes of the requester, the resource, the environment, and the action to evaluate and enforce policies. ABAC allows for fine-grained and dynamic access control based on the context of the request, rather than predefined roles or privileges. ABAC is suitable for SaaS and PaaS, where the features within a service may vary depending on the customer's needs, preferences, and subscription level. ABAC can help implement ZT by enforcing the principle of least privilege and verifying every request based on multiple factors.

Reference=

Attribute-Based Access Control (ABAC) Definition

General Access Control Guidance for Cloud Systems

A Guide to Secure SaaS Access Control Within an Organization

Get Premium CCZT Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

27 comments · newest first

Laurel 10 months ago

Surprised to see ABAC as the answer!

Cecil 11 months ago

I thought ZT was more about PBAC.

Emilio 11 months ago

Wait, isn't RBAC still more common?

Lashanda 11 months ago

Definitely ABAC! Makes the most sense.

Ronna 11 months ago

I'm pretty sure it's ABAC.

Sharika 12 months ago

I’m leaning towards ABAC since it seems to align with the dynamic nature of access in SaaS and PaaS environments.

Kristel 12 months ago

I feel like DBAC could be relevant too, but I can't recall if it's specifically tied to ZT frameworks.

Ernest 12 months ago

I remember practicing a question about RBAC, but I'm not sure if it fits with Zero Trust principles.

France 1 year ago

I think ZT stands for Zero Trust, which might relate to ABAC since it focuses on attributes rather than roles.

Celeste 1 year ago

Based on my understanding of Zero Trust principles, I think the answer is B - Attribute-based access control (ABAC). Zero Trust focuses on verifying user and device attributes to determine access, rather than relying on static roles or privileges. So ABAC seems like the access control method that would be most aligned with Zero Trust.

Janessa 1 year ago

I'm a bit confused by the wording of this question. It's asking which access control method ZT will help define, but the options seem to be the different access control models themselves. I'm not sure if I'm missing something here. Maybe I should review my notes on Zero Trust and access control again.

Franklyn 1 year ago

Okay, let me see if I can break this down. Zero Trust is all about verifying user identity and device posture before granting access, right? So it makes sense that it would help define an attribute-based access control model, where access is granted based on user and device attributes. I'm feeling more confident about B as the answer.

Art 1 year ago

Hmm, I'm a bit unsure about this one. I know Zero Trust is about verifying access based on various factors, but I'm not entirely clear on how that relates to the different access control models. I'll have to think this through carefully.

Eden 1 year ago

I'm pretty sure this is asking about access control methods that Zero Trust (ZT) helps define in SaaS and PaaS environments. Based on my understanding, the correct answer is B - Attribute-based access control (ABAC).

Quentin 1 year ago

I'm a little confused by the wording of the question. Is the merchant looking to create a new product called "Our Top Combo" that contains the four existing products, or are they just trying to group the four products together in some way? I'll need to re-read the question carefully to make sure I understand the requirement.

Cary 1 year ago

I'm a bit confused by all the different organizations and their relationships. I'll need to make sure I fully grasp the context before trying to answer the question.

Glen 1 year ago

I'm feeling pretty confident about this one. Based on the question and the properties, I think option D is the right answer.

Leota 2 years ago

That's true, PBAC could provide specific privileges to different users.

Elliott 2 years ago

I think privilege-based access control (PBAC) might be useful for more granular control.

Jonell 2 years ago

RBAC could work well too, especially for defining roles within a service.

Reuben 2 years ago

I believe role-based access control (RBAC) could also be a good option.

Leota 2 years ago

I agree, ABAC seems like the most flexible method for controlling access.

Jonell 2 years ago

I think ZT will help define attribute-based access control (ABAC) for access.

Joseph 2 years ago

I believe ZT will help define access using ABAC to more granularly control features.

Ethan 2 years ago

I'm not sure, I think it could also be C) Role-based access control (RBAC).

Serina 2 years ago

I agree, ABAC makes sense for defining access in SaaS and PaaS.

Kassandra 2 years ago

I think the answer is B) Attribute-based access control (ABAC).

CSA CCZT Exam - Topic 1 Question 11 Discussion