Suppose you are a domain administrator and are choosing an employee to carry out backups. Which access
control method would be BEST for this scenario?

A.
RBAC – Role-Based Access Control

B.
MAC – Mandatory Access Control

C.
DAC – Discretionary Access Control

D.
RBAC – Rule-Based Access Control

Explanation:
Role-based access control (RBAC) provides access to resources according to the role the user holds within the
company or the tasks that the user has been assigned.
Incorrect Answers:
B: Mandatory access control (MAC) is an access policy that restricts access to objects based on the security
clearance of a subject and the classification of an object.
C: Discretionary access control (DAC) is an access control model and policy that restricts access to objects
according to the identity of the subjects and the groups to which those subjects belong.
D: Rule-based access control makes use of explicit rules that specify what can and cannot happen between a
subject and an object.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, pp. 220-228