RBAC stands for which concept?

• A. Access control that uses all access rights for everyone.
• B. Role-Based Access Control.
• C. Rights-Based Access Policy.
• D. Resource-Based Access Control.

Answer: (D)

Role-Based Access Control assigns permissions to roles rather than to individual users, and users obtain those permissions by being placed into the appropriate role. This makes managing access scalable in larger environments because you update permissions once for the role, and every user in that role inherits them. It supports principles like least privilege and separation of duties, since roles are defined to reflect job functions and duties.

The other options describe different ideas that aren’t what this acronym represents. One option suggests universal access for everyone, which isn’t how RBAC works. Another uses a nonstandard term, Rights-Based Access Policy, which isn’t the established model. The last option implies access is controlled by the resource itself, which aligns more with resource-based or owner-based approaches, not RBAC.