
Answer-first summary for fast verification
Answer: Use an attribute-based access control (ABAC) system integrated with real-time data classification tools that adjust access policies and encryption requirements automatically as data classifications change.
Option B is the most suitable proposition for implementing a scalable policy management system for dynamic data classifications. Attribute-based access control (ABAC) is a flexible access control model that uses attributes (such as user roles, environmental conditions, and data classifications) to determine access rights. By integrating ABAC with real-time data classification tools, the system can automatically adjust access policies and encryption requirements as data classifications change based on content, context, and use. This approach eliminates the need for manual updates by database administrators, as the system can dynamically enforce access controls and security measures based on changing classifications. It provides a more efficient and effective way to manage policies in a dynamic environment, ensuring that the right users have access to the right data at the right time. In contrast, option A (manually updating access controls) is not scalable and can lead to errors or delays in applying security measures. Option C (role-based access control) may not be suitable for dynamic data classifications, as static permissions based on the highest classification level may result in over-protection or under-protection of data. Option D (custom scripting solution) may be complex to develop and maintain, and may not provide real-time enforcement of security measures. Overall, option B offers a comprehensive and automated solution for managing dynamic data classifications and enforcing access controls in a scalable manner.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In an environment where data classification can dynamically change based on content, context, and use, what is the most effective method to implement a scalable policy management system that automatically enforces access controls and security measures?
A
Develop a custom scripting solution that periodically scans data stores for classification changes and applies templated security policies based on predefined rules for each classification level.
B
Use an attribute-based access control (ABAC) system integrated with real-time data classification tools that adjust access policies and encryption requirements automatically as data classifications change.
C
Manually update access controls and security policies whenever data classifications change, relying on database administrators to apply these changes.
D
Implement a role-based access control (RBAC) system that assigns static permissions based on the highest possible classification level of data, ensuring over-protection.