Exam CISSP topic 1 question 61 discussion

given answer is correct

The MOST significant benefit of role-based access control (RBAC) is: B. Management of least privilege. RBAC is a widely adopted access control model that provides several benefits, but the management of least privilege is considered its most significant advantage. RBAC ensures that users are assigned only the privileges necessary to perform their specific job functions, known as the principle of least privilege. By implementing RBAC, organizations can minimize the risk of inappropriate access and unauthorized actions. Users are granted access rights based on predefined roles that align with their responsibilities, eliminating unnecessary privileges that could be exploited. This helps to reduce the attack surface and potential impact of security incidents. While RBAC also offers other benefits, such as reducing administrative overhead and providing a structured and scalable access control framework, the management of least privilege is considered the most significant because it directly addresses the principle of granting users the minimal privileges required to perform their tasks effectively and securely. ps. do not forget segregation of duties

The most significant benefit of Role-Based Access Control (RBAC) is its ability to simplify and reduce administrative overhead by grouping users into roles based on their job functions. These roles are then assigned permissions, instead of managing access for individual users.

The correct answer is: D. Reduction in authorization administration overhead Explanation: The most significant benefit of Role-Based Access Control (RBAC) is its ability to reduce authorization administration overhead. By assigning access permissions based on roles rather than individual users, administrators can easily manage and update permissions across multiple users who share the same job functions. This simplifies user access management, especially in large organizations, where manually assigning permissions to each user would be time-consuming and prone to errors. Role-based grouping allows for efficient user management and easier updates, as changes to a role's permissions automatically apply to all users assigned to that role.

D is the MOST significant benefit of role-based access control (RBAC) B is the General principles of access control

Role-Based Access Control (RBAC) is a model for managing user permissions based on their role within an organization. The key advantage of RBAC is that it simplifies access control by grouping permissions into roles and assigning those roles to users, rather than managing individual permissions for each user. Why Option D is Correct: Reduction in authorization administration overhead is the most significant benefit of RBAC because it allows for easier management of user access. Instead of assigning individual permissions to each user, administrators can assign users to roles, and those roles automatically inherit the appropriate permissions. This significantly reduces the administrative burden and ensures consistency in access management. As the organization grows, managing individual permissions becomes more complex and error-prone. RBAC simplifies this by reducing the number of direct assignments needed and ensuring that users only have access to the resources required for their roles.

You do not authorize someone some permission/role for reducing administration overhead. Least privilege always needs to be considered.

B. having a role will put the allowed priv already for the user. easier to manage.

D RBAC does not guarantee you give the least privilege. It allows you not to spend too much time doing it. Least priviledge is an objective, but RBAC does not guarantee it !

Refer to CISSP 9th official guide chapter 14 page 157. RABC helps to implement of the 'least privilege ' policy.

Going with D here, managing least privilege is a subset of admin overhead

B. Management of least privilege

I choose D

B is the correct answer

D. management and admin overhead work is reduced by put placing ten thousand users into one group if they all need to have access to a particular object. RBAC is not granular access level, that is where DAC comes into play providing special access to a specific user or group granted by the data owner. D is the correct answer.

Page 684 of OSG 9th edition

D. This question asks for the most significant benefit or RBAC. I searched a lot and didn't find a single site that listed anything besides D is a benefit. A sounds good but I didn't see it anywhere, so D.