MENU
In order to reduce the risk of insider attacks, a company assigns role-based permissions to its users.
Which network security concept does this scenario address?
Suggested Answer: D
Get Premium Network and Security Foundation (D315) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Authorization is the process of granting specific access rights and permissions based on user roles. By implementing Role-Based Access Control (RBAC), organizations ensure that users only have access to resources necessary for their job functions, reducing the risk of insider threats.
Authentication verifies identity but does not control access.
Accounting logs activities but does not restrict access.
Availability ensures system uptime but is unrelated to permissions.
4 comments · newest first
EL
Elsa
38 minutes ago
I’m leaning towards authorization as well, but I wonder if accounting might play a role in tracking those permissions.
SE
Serina
5 days ago
I feel like this could also touch on authentication, but it seems more focused on what users can do, so maybe it's authorization?
RE
Rebbecca
10 days ago
I'm not entirely sure, but I remember something about role-based access control in a practice question. Could it be authorization too?
DE
Denny
16 days ago
I think this is related to authorization since it involves assigning permissions based on roles.