Identity and Access Management
Question #193
A university uses Attribute-Based Access Control (ABAC). A student tries to access a sensitive file from an insecure personal device. What should the system do?
A. Inform the student and allow temporary access.
B. Inform the student the device is insecure and deny access.
C. Log the access attempt and deny access.
D. Log the access attempt along with device details without denying access.
Domain Concept: Identity and Access Management
This scenario evaluates management-level decision making in Identity and Access Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.