
Ultimate access to all questions.
You are tasked with designing an ABAC strategy for a multi-national corporation that operates in various countries with different compliance requirements. The corporation has a diverse workforce with employees, contractors, and third-party vendors. How would you structure the ABAC policies to ensure compliance with local regulations while maintaining a consistent global security posture?
A
Create a single global IAM policy that applies to all users, regardless of their location or role.
B
Develop country-specific IAM policies that override the global policies when conflicts arise.
C
Implement a dynamic ABAC model where attributes such as location, role, and user type are evaluated at runtime to determine access.
D
Use a combination of RBAC and ABAC, assigning roles based on job function and then applying ABAC for specific actions based on location and compliance requirements.