A database administrator needs to ensure only approved users can access specific database tables to perform financial functions. Which of the following is the best access control method for the administrator to use?
Access control is a critical aspect of database security. The best method for controllingwho can access financial databased onjob rolesisRole-Based Access Control (RBAC).
Option A (Role-based):Correct.RBAC assigns permissions based on a user’s role within the organization (e.g., accountants can access financial data, but sales representatives cannot).
Option B (Rule-based):Incorrect. Rule-Based Access Control (RuBAC) enforces policies based on rules, such as time restrictions, rather than user roles.
Option C (Discretionary):Incorrect. Discretionary Access Control (DAC) allows individual users to grant permissions, which can lead to security risks in financial systems.
Option D (Group-based):Incorrect. Group-Based Access Control (GBAC) assigns permissions based on user groups, but RBAC provides finer control for financial functions.
[Reference:The CompTIA Data+ exam emphasizesRBAC as a secure and efficient method for managing access to sensitive database tables., , , ]
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit