Certified Information Systems Security Professional (CISSP) — Question 398

An organization would like to ensure that all new users have a predefined departmental access template applied upon creation. The organization would also like additional access for users to be granted on a per-project basis. What type of user access administration is BEST suited to meet the organization's needs?

Answer options

• A. Decentralized
• B. Hybrid
• C. Centralized
• D. Federated

Correct answer: B

Explanation

The Hybrid access administration model is ideal here as it allows for a standardized departmental access template while also enabling flexibility for additional project-based access. The Decentralized model would lack the uniformity needed for the predefined templates, Centralized would not allow for the per-project customization, and Federated typically relates to identity management across different domains rather than specific access templates.