Certified Information Systems Security Professional CISSP · Free Practice Question Easy

Question 74

The HR department at ThorTeaches.com has approached you with a request to create an access control system for their employee records. What is the main goal of an access control system?
  • A To restrict access based on user attributes
  • B To prevent unauthorized access to resources
  • C To encrypt data
  • D To monitor user activity
Reveal correct answer

Correct answer: B

Explanation

The correct answer: The main goal of an access control system is to prevent unauthorized access to resources. This can involve a range of resources, including physical locations, computer systems, network resources, or data. An access control system helps an organization ensure that only individuals who have been granted appropriate permissions can access specific resources, thus maintaining security and integrity. The incorrect answers: While monitoring user activity is an important aspect of security, it is not the main goal of an access control system. The primary function of access control is to regulate who can access resources, not to monitor what they do once they have access. Encrypting data is a common security measure that transforms plaintext data into an unreadable format until it's decrypted using a specific key. Encryption is a vital part of data security but it's not the primary goal of an access control system. Restricting access based on user attributes is a common approach in attributed-based access control (ABAC) systems but it is not the main goal of an access control system. The main goal is to prevent unauthorized access, not to restrict access based on user attributes.

Discussion

Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.

You must be logged in to post a comment.

Preparing For

Your Certification?

255+ certifications
Detailed explanations
Free PDF samples

Has All The Questions You Need