100-160 Question 26
Select 3A company is implementing a new access management system to secure its sensitive data. The system requires users to authenticate using a combination of a password and a one-time PIN sent to their registered mobile devices. Additionally, users are granted access to resources based on their job roles. Which access management principles are being applied in this scenario?
- A
Least Privilege
- B
Multi-Factor Authentication
- C
Role-Based Access Control (RBAC)
- D
Separation of Duties
- E
Single Sign-On (SSO)
Show answer and explanation
Correct answers: A, B, C
Explanation
This scenario demonstrates multiple access management principles. Least Privilege ensures users only have the minimum access required for their roles. Multi-Factor Authentication strengthens security by requiring two forms of authentication. Role-Based Access Control (RBAC) organizes access permissions based on job roles. These principles together enhance the security and proper management of sensitive data.
- A. Correct.
Least Privilege is applied because users are granted access to resources based on their job roles, ensuring they only have access to what is needed for their work.
- B. Correct.
Multi-Factor Authentication is applied because the system requires both a password and a one-time PIN sent to a mobile device, adding an extra layer of security.
- C. Correct.
Role-Based Access Control (RBAC) is applied as access to resources is granted based on job roles, which is a key principle of RBAC.
- D. Incorrect.
Separation of Duties is not directly mentioned or implied in this scenario, as there is no indication that tasks or responsibilities are split among multiple roles to prevent fraud or error.
- E. Incorrect.
Single Sign-On (SSO) is not relevant here, as there is no mention of a unified login process across multiple systems or services.