CAF-3 · Chapter 16 · Question 7 of 15
A hospital configures its central database so that doctors can only view patient medical histories, while the billing department can only view patient payment statuses. Neither department can see the other's data. This is an application of:
Test yourself: pick an answer
Reveal answer & explanation
Correct answer: A) Role-Based Access Control (RBA
Explanation
Role-Based Access Control (RBAC) ensures that users are granted access to systems and data based strictly on their specific job roles and responsibilities within the organization
More The 5 Key Components of ITGCs (Application Scenarios) MCQs
- Q9An e-commerce company installs fire suppression systems, raised floors, temperature sensors, and biometric fingerprint scanners at the…
- Q10Before deploying a major software update to the live ERP system, the IT team runs the new code in an isolated "sandbox" environment to…
- Q11Before designing or purchasing any new IT controls, the Chief Information Security Officer (CISO) conducts a thorough review to identify…
- Q12Six months after implementing a new Role-Based Access Control policy, the IT audit team evaluates the system logs to ensure the controls…
- Q13A global retail brand struggles to maintain a unified ITGC framework because its European branches must follow GDPR privacy laws, while…