Palo Alto Networks (PANW) Certified Cybersecurity Entry-level Technician (PCCET) Practice Exam

Which type of access control can change a user's permissions based on their location?

1. RBAC

2. ABAC

3. PAP

4. CHAP

The correct answer is: ABAC

The correct answer is based on the concept of Attribute-Based Access Control (ABAC). ABAC is a dynamic access control model that evaluates attributes such as user characteristics, resource properties, and environmental factors, including location. This allows for more granular and flexible permissions management since access rights can be altered in real-time based on a user’s current context or situation. For instance, if an employee is within a corporate building, they might gain different access permissions compared to when they are working remotely or in an unsecured location. This adaptability is a key strength of ABAC, enabling organizations to implement policies that reflect the complexities of different environments and enhance security. Other access control methods such as Role-Based Access Control (RBAC), while effective in many scenarios, typically assign permissions based on predefined roles rather than considering contextual factors such as location. Similarly, PAP (Password Authentication Protocol) and CHAP (Challenge-Handshake Authentication Protocol) focus on authentication mechanisms rather than access control policies. These approaches do not provide the flexibility that ABAC offers for adjusting permissions based on varying situational attributes.