Access Control for File Share - SY0-601 Exam Question Answer | [Provider Name]

Security Administrator Needs to Configure Remote Access to a File Share

Prev Question Next Question

Question

A security administrator needs to configure remote access to a file share so it can only be accessed between the hours of 9:00 a.m.

and 5:00 p.m.

Files in the share can only be accessed by members of the same department as the data owner.

Users should only be able to create files with approved extensions, which may differ by department.

Which of the following access controls would be the MOST appropriate for this situation?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C.

The most appropriate access control method for this situation would be D. DAC (Discretionary Access Control).

DAC allows the owner of the file or resource to control who has access to it. In this scenario, the data owner is a department, and the owner can set permissions so that only members of the same department can access the files in the file share. Additionally, the owner can specify that the files can only be accessed between certain hours, which meets the requirement for access during 9:00 a.m. and 5:00 p.m.

DAC also allows the data owner to specify which file types or extensions are allowed or disallowed. The requirement for different approved file extensions by department can be enforced through DAC.

Role-based access control (RBAC) would not be appropriate for this scenario since it is not necessary to assign roles to users to control access to the file share.

Mandatory access control (MAC) and attribute-based access control (ABAC) are not the most appropriate access controls for this scenario because they are not based on the discretion of the data owner, but rather on system-defined rules or attributes. MAC assigns levels of security clearance to users and objects, and ABAC uses attributes assigned to users and objects to determine access control decisions.

Prev Question Next Question