Which term suggests potential access profiles based on roles?

Which term suggests potential access profiles based on roles?

• A. Access Profiles
• B. Periodic Testing
• C. Compliance Managers
• D. Role Mining Technology

Answer: (D)

The key idea being tested is how to uncover role-based permission groupings from current access data. Role mining technology analyzes who has access to which resources and how those permissions are used, then groups users into clusters that share similar entitlement patterns. From these clusters, it can propose candidate roles and their associated access profiles, even when explicit roles haven’t been defined yet. That makes it the best fit for describing potential access profiles based on roles, because it directly derives role-aligned permission sets from actual data. Access profiles are just sets of permissions, not necessarily derived from any role structure. Periodic testing focuses on rechecking controls over time, not on discovering or proposing role-based profiles. Compliance managers refer to governance roles or people overseeing adherence to rules, not the process of deriving roles and permissions.

The key idea being tested is how to uncover role-based permission groupings from current access data. Role mining technology analyzes who has access to which resources and how those permissions are used, then groups users into clusters that share similar entitlement patterns. From these clusters, it can propose candidate roles and their associated access profiles, even when explicit roles haven’t been defined yet. That makes it the best fit for describing potential access profiles based on roles, because it directly derives role-aligned permission sets from actual data.

Access profiles are just sets of permissions, not necessarily derived from any role structure. Periodic testing focuses on rechecking controls over time, not on discovering or proposing role-based profiles. Compliance managers refer to governance roles or people overseeing adherence to rules, not the process of deriving roles and permissions.