A global financial firm is evolving its access control strategy to manage access to sensitive market analysis data. The current RBAC system is too rigid for its needs. The firm requires a dynamic model that can grant or deny access based on a combination of user clearance level, the time of day, the user's geographic location, and the device's security posture. Which access control model would BEST support these complex, context-aware authorization requirements?
The correct answer is Attribute-based access control (ABAC). ABAC is designed to make access decisions by evaluating a set of rules against the attributes of the subject, object, and environment. In this scenario, attributes include the user's clearance, time of day, location, and device posture, making ABAC the ideal fit for such dynamic and granular requirements. Role-based access control (RBAC) is explicitly mentioned as being too rigid. Discretionary access control (DAC) relies on the data owner's discretion and lacks the centralized, policy-driven complexity needed. Mandatory access control (MAC) is based on static security labels (e.g., clearance levels) and does not natively support dynamic environmental attributes like time or location.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Attribute-Based Access Control (ABAC)?
Open an interactive chat with Bash
How does ABAC differ from Role-Based Access Control (RBAC)?
Open an interactive chat with Bash
What are examples of attributes used in ABAC?
Open an interactive chat with Bash
ISC2 CISSP
Identity and Access Management (IAM)
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .