ISC2 · CISSP
Authorization and the provisioning lifecycle
CISSP · Lesson 22 of 34 · 2:42:30
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: DAC, MAC, RBAC, RuBAC, ABAC, and risk-adaptable access control, policy decision and enforcement points, provisioning, transfers, and deprovisioning, account access reviews, privilege escalation, least privilege, and service accounts. Includes three original practice questions.
Preview the topics
- A policy lets pharmacists approve prescriptions only for their own hospital, during their shift, from a managed device. Which model is this?
- A review finds that a nurse who changed departments three times still has the access of every past role. What is this?
- Which component evaluates an access request against policies, before another component applies the decision?