Discuss ISC2 CAP Exam Topic 5 Question 34

Which of the following statements about role-based access control (RBAC) model is true?

AIn this model, the permissions are uniquely assigned to each user account.

BIn this model, a user can access resources according to his role in the organization.

CIn this model, the same permission is assigned to each user account.

DIn this model, the users can access resources according to their seniority.

Suggested Answer: B

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Toi 11 months ago

D doesn't really fit, seniority isn't the main factor in RBAC.

Genevive 12 months ago

C is misleading, not every user gets the same permissions.

Chauncey 12 months ago

Wait, I thought permissions were assigned individually?

Portia 12 months ago

Totally agree, RBAC is all about roles!

Lashawnda 1 year ago

B is the correct answer! Users access based on their roles.

Major 1 year ago

D sounds off to me too; I don't recall seniority being a factor in RBAC. It’s more about job functions, right?

Bette 1 year ago

I practiced a question similar to this, and I think C is definitely wrong because it suggests all users have the same permissions, which isn't how RBAC works.

Kanisha 1 year ago

I'm a bit unsure, but I feel like A can't be correct since RBAC assigns permissions based on roles, not users.

Shasta 1 year ago

I think I remember that RBAC is about roles, not individual permissions. So, maybe B is the right answer?

Audria 1 year ago

Hmm, I'm not totally sure about this one. I think it might be E - Reporting snapshot, but I'm not 100% confident. I'll have to think it through a bit more.

Shonda 1 year ago

Hmm, I'm a little unsure about the syntax here. I know we need to use the $slice operator, but I'm not sure if the index range should be [0, 5] or just [0, 5). I'll have to double-check the documentation to make sure I get this right.

Anthony 1 year ago

I think the term "service autonomy" keeps coming up in my practice questions, but I can't recall exactly how it ties in here.

ISC2 CAP Exam - Topic 5 Question 34 Discussion