What are the main security concepts you must configure in Foundry Aware (RBAC, SSO, policies)?

• A. Encryption keys, firewall rules, and VPN access define who can view assets.
• B. MFA, LDAP, and audit trails define who can view assets.
• C. Role-based access control (RBAC), single sign-on (SSO), and data access policies define who can view or modify assets and how.
• D. Only data encryption settings determine access.

Answer: (C)

Access control in Foundry Aware is about who can see and do what with assets, and it’s enforced through three layers: role-based access control to assign capabilities to groups or individuals, single sign-on to manage how users prove who they are, and data access policies that specify what actions are allowed on which data. RBAC determines whether a user has a given role—like data scientist, data engineer, or admin—and the associated permissions. SSO centralizes authentication so that once a user logs in with their enterprise identity, their role and entitlements are recognized. Data access policies define the exact rules for viewing, editing, exporting, or deleting data, and can be scoped to datasets, projects, or environments, including any field-level constraints.

These components together define who can view or modify assets and how. Encryption keys, firewall rules, and VPNs protect data at the infrastructure level and do not by themselves govern in-application permissions. MFA, LDAP, and audit trails relate to authentication and logging, which support security but don’t establish the authorization boundaries and data-access rules that control asset visibility and modification.