Answer-first summary for fast verification
Answer: Implement a dynamic ABAC model where attributes such as location, role, and user type are evaluated at runtime to determine access.
A dynamic ABAC model allows for the evaluation of attributes at runtime, which is essential for meeting varying compliance requirements across different countries. This approach ensures that access decisions are made based on the current context, including location and user attributes, without the need for frequent policy updates.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
You are tasked with designing an ABAC strategy for a multi-national corporation that operates in various countries with different compliance requirements. The corporation has a diverse workforce with employees, contractors, and third-party vendors. How would you structure the ABAC policies to ensure compliance with local regulations while maintaining a consistent global security posture?
A
Create a single global IAM policy that applies to all users, regardless of their location or role.
B
Develop country-specific IAM policies that override the global policies when conflicts arise.
C
Implement a dynamic ABAC model where attributes such as location, role, and user type are evaluated at runtime to determine access.
D
Use a combination of RBAC and ABAC, assigning roles based on job function and then applying ABAC for specific actions based on location and compliance requirements.