Which feature protects CUCM admin access?

• A. RBAC
• B. MFA
• C. LDAP binding
• D. Firewall

Answer: (A)

Role-Based Access Control defines who can do what in CUCM by assigning admin users to roles that have specific permissions. This setup enforces the principle of least privilege, so each administrator can perform only the tasks their role allows, protecting the system from unintended or unauthorized changes.

MFA strengthens login authentication by requiring an additional verification factor, but it doesn’t define what actions an authenticated user may perform within CUCM. LDAP binding is about how identities are authenticated against an external directory, not the internal authorization model that restricts admin actions. A firewall protects network access to the system, not the granular permissions within CUCM for administrative tasks.

Because controlling what admin users are allowed to do inside CUCM is exactly what RBAC provides, this feature is the best answer.