Question 69

Explanation

The correct answer: Access control lists (ACLs) and two-factor authentication are two security controls specifically designed to prevent unauthorized access to sensitive information: An access control list is a method of ensuring that access to certain resources, such as files or network data, is limited to authorized users. It is a list that an operating system or application uses to manage permissions. Each item on the list specifies a subject (a user or a group of users) and an operation (like read, write, execute) that the subject can perform on an object (like a file, or a piece of hardware). Two-factor authentication (2FA), on the other hand, is a method of confirming users' claimed identities by using a combination of two different factors: something they know, something they have, or something they are. A common example is a user using a password (something they know) and receiving a text message on their phone (something they have) to authenticate. This two-step process makes it much harder for unauthorized individuals to gain access to sensitive data because they must compromise two separate elements. The incorrect answers: Encryption and firewalls: While both encryption and firewalls are important components of a secure system, they do not primarily prevent unauthorized access to sensitive information. Encryption is a method of encoding data so that only authorized parties can decode it, providing confidentiality. A firewall, on the other hand, controls network traffic by permitting or blocking specific data packets based on pre-determined security rules, it primarily prevents unauthorized access to a network but not necessarily to sensitive data specifically. Antivirus and intrusion detection systems: Antivirus software and intrusion detection systems are protective measures against malicious software and potential security breaches. However, they do not inherently prevent unauthorized access to sensitive information. Antivirus software scans, detects, and removes malicious software. An intrusion detection system monitors a network or systems for malicious activity or policy violations. While they add an extra layer of security, they do not directly control who can access specific sensitive information. Physical security and biometric authentication: Although physical security measures (like locks or guards) and biometric authentication (like fingerprint scans or facial recognition) can be used to prevent unauthorized physical access to a device or a facility, they don't directly prevent unauthorized access to sensitive information at the data level. For instance, if sensitive data were transmitted across a network, physical security and biometric authentication would not have a role in protecting that data. Biometric authentication could be a part of a multi-factor authentication process but on its own, it does not cover all aspects of preventing unauthorized data access.