Access Control Configuration

Scenario Overview

A former administrator misused owner-level permissions to upload inappropriate content targeting the CEO. To prevent similar incidents, the organization is revising its access control model. You are tasked with assigning proper access methods, security roles, and authentication methods for four groups: Administrators, Developers, Finance, and Clients.

Guidance for decisions:

• Admins must have temporary elevated privileges only (just-in-time access).
• Internal staff (Admins, Developers, Finance) may use MFA.
• Developers typically use a Linux Operating System so connect using the command line.
• The Finance team typically work from home
• Clients need authentication but cannot use MFA.
• Access must follow least privilege using role-based access control (RBAC).

1. What could you implement to secure the authentication process? -- Select -- MFA RBAC Firewall Rules 2. What principle should be enforced to ensure minimal permissions for all users? -- Select -- Principle of least privilege Job rotation Mandatory vacation

Category	Administrator	Developer	Finance	Client
Access Method	-- Select -- Just-in-time Access Always-on VPN Public Guest Portal	-- Select -- SSH over VPN Just-in-time Access Public Guest Portal	-- Select -- VPN Client Direct LAN Access Public Guest Portal	-- Select -- Public Web Access VPN Client Admin Console
Security Role	-- Select -- Management Role Guest Role Read-only Role	-- Select -- Developer Role Management Role Client Role	-- Select -- Read-only Role Finance Role Developer Role	-- Select -- Guest Role Admin Role Finance Role
Authentication Method	-- Select -- Password Vaulting Certificate Authentication Biometric Login	-- Select -- MFA with Password Token-based Access Single Sign-On (SSO)	-- Select -- MFA with Password Password Only Smart Card	-- Select -- Password Only MFA with Password Biometric Login