Mastering Access Control and MFA for Rwandan ICT Exams
7 September 2026
Understand access control concepts like authentication vs authorization, MFA types, and RBAC to prepare for MIFOTRA ICT exams.
Authentication vs Authorization
Authentication verifies who you are. Authorization determines what you can access.
Authentication involves validating credentials, like passwords or fingerprints. Authorization checks permissions after identity is confirmed.
- Authentication: Example - entering a correct password.
- Authorization: Example - accessing files with permission.
Multifactor Authentication (MFA) Types
MFA uses more than one method of verification to enhance security.
Three main factors: something you know, something you have, and something you are.
- Something you know: Password or PIN.
- Something you have: Smartphone or smart card.
- Something you are: Fingerprint or facial recognition.
Common Authentication vs Authorization Traps
Don't confuse verifying identity (authentication) with verifying access (authorization).
Both are crucial, but they address different aspects of security.
Role-Based Access Control (RBAC)
RBAC grants access based on roles in an organization.
Roles are tied to permissions needed to perform specific job functions.
- More efficient than assigning permissions individually.
- Common in Rwandan public service for accountability.
Discretionary Access Control (DAC)
DAC gives the owner control over their resources.
Owners decide who else can access their data or resources.
Mandatory Access Control (MAC)
MAC strictly dictates access rights based on policies set by the organization.
Users cannot alter access rights on their own.
Principle of Least Privilege
Assign users the minimum access necessary to perform their job.
Reduces the risk of unauthorized access to sensitive data.
Common questions
MFA is a security system requiring more than one form of verification, like a password and a fingerprint.
RBAC assigns access based on roles, while DAC assigns access based on owners’ decisions.
It means giving users only the access they need to perform their job, no more.
In MAC, permissions are set by central policies, ensuring strict access control.
They ensure users are who they claim to be and can only access what they are permitted to.
Practise this
- A doctor reports that they are unable to access the hospital management system from their home computer. What should you do to resolve this issue?
- Which of the following is the best way to handle an angry customer?
- What is the function of a Solid State Drive (SSD)?
- The hospital management system is experiencing issues with data encryption and security due to a compromised encryption key. What is the best approach to resolve this issue while ensuring data protection and minimizing downtime?
- What is the primary purpose of Safe Mode in Windows?
- When a printer is not printing, which of the following should you check first?