A company plans to expand by hiring new engineers who work in highly specialized areas. Each engineer will
have very different job requirements and use unique tools and applications in their job. Which of the following is
MOST appropriate to use?

A.
Role-based privileges

B.
Credential management

C.
User assigned privileges

D.
User access

Explanation:
In this question, we have engineers who require different tools and applications according to their specialized
job function. We can therefore use the Role-Based Access Control model.
Role-Based Access Control (RBAC) models approach the problem of access control based on established
roles in an organization. RBAC models implement access by job function or by responsibility. Each employee
has one or more roles that allow access to specific information. If a person moves from one role to another, the
access for the previous role will no longer be available.
Instead of thinking “Denise needs to be able to edit files,” RBAC uses the logic “Editors need to be able to edit
files” and “Denise is a member of the Editors group.” This model is always good for use in an environment in
which there is high employee turnover.