Which of the following would be classified as the first line of defense from the information security and privacy perspective?

The correct answer is C. Identification and authentication of users.. Identification and authentication is the first line of defense because security cannot begin until a system knows who is asking - you must establish identity before any other control can be meaningfully applied. Without knowing the actor, you cannot enforce access policies, audit

Privacy Architecture

Question

Options

AControl of changes to applications.
BValidation of data when entering an application.
CIdentification and authentication of users.
DMaking back-up copies.

How the community answered

(33 responses)

A
3% (1)
B
12% (4)
C
76% (25)
D
9% (3)

Explanation

Identification and authentication is the first line of defense because security cannot begin until a system knows who is asking - you must establish identity before any other control can be meaningfully applied. Without knowing the actor, you cannot enforce access policies, audit actions, or apply any downstream protections.

A (Change control) is a development/governance control that protects application integrity, but it operates much later in the lifecycle than user access.
B (Input validation) protects against malicious data, but it only matters after a user has already entered the system.
D (Backups) are a recovery control - the last resort after something has gone wrong, not a preventive first step.

Memory tip: Think of security as a building - authentication is the front door lock. Change control, input validation, and backups are all things that happen inside the building. You check ID before letting anyone in.

Topics

#User Authentication#Identity Management#Access Control

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice