A chief Financial Officer (CFO) has asked the Chief Information Officer (CISO) to provide responses to a
recent audit report detailing deficiencies in the organization security controls. The CFO would like to
know ways in which the organization can improve its authorization controls. Given the request by the
CFO, which of the following controls should the CISO focus on in the report? (Select Three)
A.
Password complexity policies
B.
Hardware tokens
C.
Biometric systemsD. Role-based permissions
E.
One time passwords
F.
Separation of duties
G.
Multifactor authentication
H.
Single sign-on
I.
Lease privilege
Directions are for three but only two are selected.
Since the directions are for authorization (not authentication), there doesn’t really seem to be a 3rd option. in a test environment I would choose B as a last option.
0
1
The third control is D. Role-Based Permissions.
1
0
D is missing and it is Role-based permissions
and D is the last answer
D,F,I
1
0