A financial services firm's security architect is designing an access control strategy. The system must be able to dynamically adjust a user's permissions in real-time; for instance, by requiring step-up authentication or blocking access when a user tries to connect from an unrecognized network or outside of normal working hours. Which access control model BEST supports this requirement by continuously analyzing various risk factors before granting or modifying access to resources?
The correct answer is Risk-based access control. This model dynamically assesses the risk associated with an access request by evaluating various contextual factors in real-time, such as user location, time of day, and device posture. Based on this risk assessment, the system can grant, deny, or require additional authentication. Role-based access control (RBAC) assigns permissions based on job functions, not real-time contextual risk. Mandatory access control (MAC) and Discretionary access control (DAC) are based on security labels and owner-defined permissions, respectively, and do not inherently account for dynamic risk factors.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is contextual access evaluation?
Open an interactive chat with Bash
How does contextual access evaluation differ from static role assignment?
Open an interactive chat with Bash
What are examples of factors considered in contextual access evaluation?
Open an interactive chat with Bash
ISC2 CISSP
Identity and Access Management (IAM)
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .