Question

A large multinational company uses a cloud-based document storage system. The system

provides access to documents by considering a combination of factors: the user's department,
geographic location, the document's sensitivity level, and the current date and time. For example,
only the finance department of a specific region can access its financial reports, and they can do
so only during business hours. Which access control model does the company MOST likely use to
manage this complex access control?
A. Discretionary access control
B. Rule-based access controls
C. Attribute-based access control
D. Role-based access control

Answer 1

The company likely uses an Attribute-based access control model.

Step-by-step explanation:

The company most likely uses an Attribute-based access control (ABAC) model to manage this complex access control. ABAC is a model that uses attributes related to the user, resource, and environment to determine access permissions. In this case, the user's department, geographic location, document sensitivity level, and current date and time act as attributes that determine access. By combining these attributes, the system can provide fine-grained control over document access.

Learn more about Access control in cloud-based document storage