Certified Information Systems Security Professional – CISSP – Question117

The core component of Role Based Access Control (RBAC) must be constructed of defined data elements. Which elements are required?

A.
Users, permissions, operations, and protected objects
B. Roles, accounts, permissions, and protected objects
C. Users, roles, operations, and protected objects
D. Roles, operations, accounts, and protected objects

Correct Answer: C