What is a functional requirement for a secure SMB?

Question

Options

• Alow friction secure access process
• Ba holistic view of all data
• Czero trust identity-based access to applications with multifactor authentication
• Dhigh-quality, seamless, and resilient capture capabilities

• A
  6% (2)
• B
  3% (1)
• C
  75% (27)
• D
  17% (6)

Explanation

Zero trust identity-based access with MFA (Option C) is a functional requirement because it describes a specific, implementable security capability - the system must actively verify identity at every access request using multiple authentication factors. Functional requirements define what a system must do, and enforcing identity verification before granting application access is a concrete, testable function.

Why the distractors are wrong:

• A (low friction secure access) describes a non-functional quality - how smooth the experience feels - not a specific security function the system performs.
• B (holistic view of all data) is a visibility or analytics goal, leaning toward a business objective rather than a defined security function.
• D (high-quality, seamless, resilient capture) describes performance and reliability characteristics of data capture - non-functional attributes, not a security function SMBs must implement.

Memory tip: Think "Functional = a verb the system executes." Zero trust verifies, MFA authenticates - these are actions. The other options use adjectives (low friction, holistic, high-quality), which signal non-functional qualities, not functions.

No community discussion yet for this question.