CIAM Access Control Models 3

Question 1

In RBAC, what term describes the assignment of a role to a user that allows the user to exercise the role's permissions?

Accepted Answer

User-Role Assignment (URA)

Answer

User-Role Assignment (URA) is the relationship in RBAC that maps users to roles, granting them all permissions associated with those roles.

Question 2

Which RBAC constraint ensures that a user cannot hold two conflicting roles, such as both 'payment initiator' and 'payment approver'?

Accepted Answer

Static Separation of Duty (SSD)

Answer

Static SSD prevents users from being assigned to mutually exclusive roles simultaneously in their user-role assignment, enforcing segregation of duties.

Question 3

What distinguishes Dynamic Separation of Duty (DSD) from Static Separation of Duty (SSD) in RBAC?

Accepted Answer

DSD applies constraints at session activation; SSD applies at role assignment

Answer

DSD allows a user to hold conflicting roles but prevents activating them simultaneously in the same session, while SSD prevents conflicting role assignments entirely.

Question 4

A healthcare system grants doctors read access to all patient records but write access only to their own patients' records. This scenario best illustrates which model?

Accepted Answer

ABAC

Answer

ABAC can combine role attributes (doctor) with relationship attributes (my patient) and action attributes (read vs. write) to enforce this nuanced policy.

Question 5

The Chinese Wall Model is primarily designed to prevent:

Accepted Answer

Conflicts of interest between competing organizations

Answer

The Chinese Wall (Brewer-Nash) Model prevents consultants from accessing data from competing companies by dynamically restricting access based on prior accesses.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Access Control Models 3