Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 14

An access control policy for a bank teller is an example of the implementation of which of the following?

A. rule-based policy

B. identity-based policy

C. user-based policy

D. role-based policy

Step 1 of 3

Access control policy

A role-based access control model restricts the user with number of operations and objects associated with it. A bank teller works on the principle that only authorize user will be able to access the required data at particular time and the access to the required information will be according to the role of the employee inside the bank