What is a key benefit of regular access reviews in RBAC?

• A. They help ensure permissions reflect current job duties and reduce drift.
• B. They improve efficiency by reducing the need for audits.
• C. They automatically grant all requested access.
• D. They are unnecessary if roles exist.

Answer: (B)

Regular access reviews in RBAC test whether the permissions granted to users still match their current job duties and help prevent permission drift. When reviews are done regularly, you keep each person’s access aligned with what they actually need, reducing the chance that someone accumulates unnecessary or outdated privileges over time. This directly supports the goal of least privilege and strengthens security and compliance.

The idea that these reviews improve efficiency by reducing the need for audits isn’t quite right; governance activities like reviews are a form of ongoing auditing themselves and don’t eliminate audits. Also, reviews don’t automatically grant all requested access; in fact, their purpose is to verify and adjust permissions to fit roles. And they aren’t unnecessary if roles exist—roles can become outdated, and regular reviews ensure they still reflect real duties.