Free Preparation Discussions
MENU
CSA Exam CCZT Topic 1 Question 11 Discussion
Topic #: 1
In SaaS and PaaS, which access control method will ZT help define
for access to the features within a service?
ABAC is an access control method that uses attributes of the requester, the resource, the environment, and the action to evaluate and enforce policies. ABAC allows for fine-grained and dynamic access control based on the context of the request, rather than predefined roles or privileges. ABAC is suitable for SaaS and PaaS, where the features within a service may vary depending on the customer's needs, preferences, and subscription level. ABAC can help implement ZT by enforcing the principle of least privilege and verifying every request based on multiple factors.
Reference=
Attribute-Based Access Control (ABAC) Definition
General Access Control Guidance for Cloud Systems
A Guide to Secure SaaS Access Control Within an Organization
Leota
5 months agoElliott
5 months agoJonell
5 months agoReuben
6 months agoLeota
6 months agoJonell
6 months agoJoseph
6 months agoEthan
7 months agoSerina
7 months agoKassandra
7 months ago