Identifying Role-Based Access Control Examples
Short answer
A Granting data center access only to server and network administrators exemplifies RBAC by tying permissions to specific job roles.
Question
Key Takeaways
RBAC ties permissions to job titles/roles, not individual identities (MAC/DAC) or broad groups alone; look for 'only [specific roles]'.
Learn how to identify Role-Based Access Control (RBAC) in certification scenarios. This page explains why restricting access to specific job roles is the correct answer.
Common mistake: Choosing B because it involves a group. However, RBAC requires granular role definition. Granting access to the 'entire IT department' is often too broad and doesn't reflect specific functional roles needed for the task.
Expert Analysis
The question asks for the best example of Role-Based Access Control (RBAC). RBAC is a security model where permissions are assigned to specific roles rather than individual users. Users are then assigned to those roles, inheriting the associated permissions. The key principle is granting access based on job function or responsibility.
Let's evaluate the options:
A. Granting data center access only to server and network administrators: This assigns access rights based on the 'role' of being a server administrator or a network administrator. Only individuals holding these specific job titles gain entry. This is a classic implementation of RBAC, as access is tied directly to defined organizational roles.
B. Providing the entire IT department access to an application development server: While this groups people by department, it grants broad access to everyone in that group regardless of their specific role within IT (e.g., helpdesk staff vs. developers). This is more akin to Group-Based Access Control or simply departmental access, which is less granular and precise than true RBAC, which would typically restrict access to only the specific roles needing it (e.g., 'Application Developers'). However, compared to A, A is a tighter fit for the concept of restricting access only to relevant roles.
C. Requiring all employees use multifactor authentication when accessing the network: This describes an authentication method (MFA), not an authorization model like RBAC. It applies to all users uniformly, not based on roles.
D. Allowing the human resources director to determine who can access human resources files: This describes Discretionary Access Control (DAC), where the resource owner (the HR Director) decides who gets access. In RBAC, access is determined by policy and predefined roles, not by the discretion of a single manager per file.
Therefore, Option A is the clearest example because it explicitly links access permission to specific job roles ('server and network administrators') and excludes others.
Exam Strategy
When asked to identify an access control model, first eliminate authentication methods (like MFA or passwords). Then distinguish between RBAC, DAC, and MAC. RBAC always references 'roles' or 'job functions'. If an option says 'only [Job Title]' has access, it is likely RBAC. If it says 'owner decides', it is DAC. If it says 'clearance level', it is MAC.
Frequently Asked Questions
What is the difference between RBAC and DAC?
Why is Option C incorrect?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 1 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 1
-
ERB14 👍 1 Answered ARole-Based Access Control (RBAC): Assigns access permissions based on defined job roles or functions within an organization. Restricting physical or logical access to specific areas (like the data center) strictly to people in relevant job roles (server and network administrators) aligns with RBAC principles.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All N10-009 Questions
Access 100 questions with complete answers and detailed explanations.
View Full N10-009 Practice Test →