Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Lindqvist Media gives staff access to systems based on job role, so a new marketing analyst automatically receives the same permissions as other marketing analysts, and permissions change when the person transfers. Which access control model is this, and what is its main benefit?

This is role-based access control. Permissions attach to job roles, so new starters and transferees receive the right access consistently. The main benefit is easier administration and more reliable enforcement of least privilege than assigning rights individually.

  1. ARole-based access control, which simplifies administration and supports least privilege consistentlyCorrect
  2. BDiscretionary access control, where each data owner decides individually who gets access
  3. CMandatory access control based on classification labels applied to every file
  4. DBiometric access control, which verifies identity using physical characteristics

Explanation

Permissions are tied to job roles rather than individuals, which is role-based access control. This makes onboarding and transfers easier to administer and helps enforce least privilege. Discretionary control relies on owners' choices, and mandatory control relies on classification labels.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions