Which statement correctly describes RBAC and ABAC in TA access governance?

Prepare for the Trusted Agent Exam with engaging questions, flashcards, and detailed explanations. Dive deep into essential topics to increase your chances of success. Ace your exam with confidence!

Multiple Choice

Which statement correctly describes RBAC and ABAC in TA access governance?

Explanation:
Understanding how access decisions are made in RBAC and ABAC helps here. In RBAC, access is granted based on the roles assigned to a user, with those roles carrying specific permissions. In ABAC, decisions are driven by attributes of the user, the resource, the action, and the environment, evaluated against policies to decide whether access is allowed. This combination—RBAC using predefined roles and ABAC using attributes and policies for fine-grained decisions—captures both models accurately. The other statements are incomplete or incorrect: one describes only ABAC, another describes only RBAC, and another wrongly claims RBAC and ABAC are identical.

Understanding how access decisions are made in RBAC and ABAC helps here. In RBAC, access is granted based on the roles assigned to a user, with those roles carrying specific permissions. In ABAC, decisions are driven by attributes of the user, the resource, the action, and the environment, evaluated against policies to decide whether access is allowed. This combination—RBAC using predefined roles and ABAC using attributes and policies for fine-grained decisions—captures both models accurately. The other statements are incomplete or incorrect: one describes only ABAC, another describes only RBAC, and another wrongly claims RBAC and ABAC are identical.