CompTIA Security+ SY0-701 Practice Question

Role-Based Access Control (RBAC) is an authorization model that grants or denies access to resources based on predefined roles assigned to users. In RBAC, permissions are associated with roles, and users are assigned to these roles based on their responsibilities and job functions. This simplifies access management and reduces the risk of unauthorized access. Other authorization models include:

• Discretionary Access Control (DAC): Access is determined by the owner of the resource.
• Mandatory Access Control (MAC): Access is controlled by the system based on security labels.
• Attribute-Based Access Control (ABAC): Access is granted or denied based on attributes associated with users, resources, and environmental conditions.