A recent audit has revealed that all employees in the bookkeeping department have access to
confidential payroll information, while only two members of the bookkeeping department have job
duties that require access to the confidential information. Which of the following can be
implemented to reduce the risk of this information becoming compromised in this scenario?
(Select TWO)
A.
Rule-based access control
B.
Role-based access control
C.
Data loss prevention
D.
Separation of duties
E.
Group-based permissions
B and C
0
0
My first pick was B, C. I look at the standard answers and I see they are BE. I read the question again and it specifies “in this scenario” at the end. I agree BE are correct.
Choice B is correct. These two members have special role.
Choice E is also correct in this scenario. The admin can create a group such as “Senior Bookkeeping Group” and assign the two members to that group.
0
0