An administrator wants to implement an access control model that makes access decisions based on the role and responsibilities of an individual within an organization. Which access control model best addresses this requirement?

IT Questions Bank › Category: IoT Security › An administrator wants to implement an access control model that makes access decisions based on the role and responsibilities of an individual within an organization. Which access control model best addresses this requirement?

attribute-based
role-based
discretionary
mandatory

Explanation: Role-based access control, also known as nondiscretionary, uses access decisions based on the role of individuals and their responsibilities within an organization.

Exam with this question: IoT Security 1.1 Chapter 3 Quiz Answers