Which component is primarily responsible for ensuring only authorized personnel can modify CUCM configuration?

Which component is primarily responsible for ensuring only authorized personnel can modify CUCM configuration?

• A. RBAC
• B. Audit Trail
• C. Access List
• D. Security Policy

Answer: (A)

Role-Based Access Control (RBAC) governs who can perform configuration tasks in CUCM by assigning users to roles that bundle specific permissions. When a user logs in, CUCM checks the roles and privileges tied to that user to determine what configuration actions they’re allowed to perform. This granular permission model enforces least privilege, so only personnel with the appropriate roles can modify critical settings. Audit Trail, while important for accountability, records changes after they happen and does not prevent unauthorized modifications. Access List controls network access to devices and is not about who is allowed to change CUCM configuration. Security Policy governs general security measures and policies, but it isn’t the mechanism that directly authorizes configuration changes.

Role-Based Access Control (RBAC) governs who can perform configuration tasks in CUCM by assigning users to roles that bundle specific permissions. When a user logs in, CUCM checks the roles and privileges tied to that user to determine what configuration actions they’re allowed to perform. This granular permission model enforces least privilege, so only personnel with the appropriate roles can modify critical settings.

Audit Trail, while important for accountability, records changes after they happen and does not prevent unauthorized modifications. Access List controls network access to devices and is not about who is allowed to change CUCM configuration. Security Policy governs general security measures and policies, but it isn’t the mechanism that directly authorizes configuration changes.