A company wants to limit an employee's access to a production environment.

This question falls under theData Governancedomain, focusing on access control practices for data security. The task is to limit an employee’s access to a production environment, requiring a structured approach.

Mandatory (Option A): Mandatory access control (MAC) uses strict, system-enforced rules (e.g., military settings), but it’s overly rigid for most companies.

Time-based (Option B): Time-based access limits access to specific times, which doesn’t address general production environment access.

Attribute-based (Option C): Attribute-based access control (ABAC) uses attributes (e.g., department, location), but it’s complex and not the simplest solution.

Role-based (Option D): Role-based access control (RBAC) assigns permissions based on the employee’s role, ensuring they only access what’s needed for their job, making it the best practice for limiting production access.

The DA0-002 Data Governance domain includes "data privacy concepts," and role-based access control is a widely adopted practice for limiting access in production environments.