200-201 Question 63
Single answerA security analyst is tasked with configuring time-based access control for a contractor who needs temporary access to an organization's internal systems. The contractor should only be allowed access during business hours (9 AM to 5 PM) on weekdays. Which configuration approach BEST aligns with the principle of time-based access control?
- A
Assign the contractor a user account and remove it after their project is completed.
- B
Configure an access control policy to allow login between 9 AM and 5 PM, Monday through Friday.
- C
Provide the contractor with 24/7 access to reduce administrative overhead.
- D
Create a shared account and instruct the contractor to log in only during business hours.
Show answer and explanation
Correct answer: B
Explanation
Time-based access control is a security mechanism that restricts user access to specified time windows. In this scenario, configuring an access control policy to enforce login permissions between 9 AM and 5 PM on weekdays ensures that the contractor's access is appropriately limited, reducing security risks associated with unrestricted or mismanaged access.
- A. Incorrect.
This option does not implement time-based access control. While removing the account after the project ends is a good practice, it does not restrict access to the specified time window.
- B. Correct.
This is the correct answer. Configuring an access control policy with time-based restrictions ensures that the contractor can only access the system during the specified hours and days.
- C. Incorrect.
Providing 24/7 access contradicts the principle of time-based access control and unnecessarily increases security risks.
- D. Incorrect.
Shared accounts violate security best practices and do not enforce time-based restrictions effectively.