Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam CAS-004 All Questions
Exam CAS-004 All Questions

View all questions & answers for the CAS-004 exam

CompTIA CASP CAS-004 Question # 65 Topic 8 Discussion

CAS-004 Exam Topic 8 Question 65 Discussion:
Question #: 65
Topic #: 8

An organization wants to implement an access control system based on its data classification policy that includes the following data types:

Confidential

Restricted

Internal

Public

The access control system should support SSO federation to map users into groups. Each group should only access systems that process and store data at the classification assigned to the group. Which of the following should the organization implement to enforce its requirements with minimal impact to systems and resources?


A.

A tagging strategy in which all resources are assigned a tag based on the data classification type, and a system that enforces attribute-based access control.


B.

Role-based access control that maps data types to internal roles, which are defined in the human resources department's source of truth system.


C.

Network microsegmentation based on data types, and a network access control system enforcing mandatory access control based on the user principal.


D.

A rule-based access control strategy enforced by the SSO system with rules managed by the internal LDAP and applied on a per-system basis.


Get Premium CAS-004 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.