Which solution is most appropriate to mitigate the threat of unauthorized access to sensitive data?

Question

Options

• ARegularly changing employee work schedules
• BImplementing strong access controls and authentication mechanisms
• CProviding free Wi-Fi access to all visitors
• DHolding monthly security awareness seminars

• A
  3% (1)
• B
  76% (28)
• C
  14% (5)
• D
  8% (3)

Explanation

Implementing strong access controls and authentication mechanisms (B) directly addresses unauthorized access by ensuring only verified, authorized users can reach sensitive data - through tools like multi-factor authentication, role-based permissions, and least-privilege policies.

Why the distractors fail:

• A (changing work schedules) affects staffing logistics, not data access - a malicious actor doesn't need to be on shift to breach a system.
• C (free Wi-Fi for visitors) actively increases attack surface by exposing the network to untrusted devices, making it the opposite of a mitigation.
• D (monthly security seminars) builds awareness, which is a useful complement to security, but awareness alone cannot enforce who gets access to what.

Memory tip: Think "access problem = access solution." When the threat is unauthorized access, the fix must directly control access - not schedule people, educate them, or open the network wider. If the answer doesn't put a gate on the data, it's not the primary mitigation.

No community discussion yet for this question.