100-160 Question 30
Select 3You are a security technician tasked with configuring access management for a company's newly implemented file-sharing system. The company wants to ensure that employees can only access files relevant to their job roles, and sensitive files require multi-factor authentication (MFA). Which access management principles should you apply to meet these requirements?
- A
Least Privilege
- B
Role-Based Access Control (RBAC)
- C
Separation of Duties
- D
Password Complexity Policy
- E
Multi-Factor Authentication (MFA)
Show answer and explanation
Correct answers: A, B, E
Explanation
To meet the company's requirements, you must apply the principles of Least Privilege and Role-Based Access Control (RBAC) to restrict access to files based on employee job roles. Additionally, Multi-Factor Authentication (MFA) is necessary to protect sensitive files by requiring additional verification steps. These principles collectively enhance security and minimize unauthorized access risks.
- A. Correct.
Applying the principle of Least Privilege ensures that employees only have access to the resources necessary for their specific job roles, reducing the risk of unauthorized access.
- B. Correct.
Role-Based Access Control (RBAC) allows you to assign permissions based on job roles, simplifying access management and ensuring that employees only access files relevant to their work.
- C. Incorrect.
Separation of Duties is important for reducing fraud or error by dividing critical tasks among multiple individuals but is not directly relevant to the requirements of this scenario.
- D. Incorrect.
A Password Complexity Policy enforces strong passwords but does not directly enforce access management principles like job-role access or multi-factor authentication.
- E. Correct.
Multi-Factor Authentication (MFA) adds an additional layer of security for sensitive files, ensuring that access requires more than just a password.