Which of the following best describes what role-based access control offers companies in reducing administrative burdens?

A.
It allows entities closer to the resources to make decisions about who can and cannot access resources.

B.
It provides a centralized approach for access control, which frees updepartment managers.

C.
User membership in roles can be easily revoked and new ones established as job assignments dictate.

D.
It enforces enterprisewide security policies, standards, and guidelines.

Explanation:
C: An administrator does not need to revoke and reassign permissions to individual users as they change jobs. Instead, the administrator assigns permissions and rights to a role, and users are plugged into those roles.