CERTIFIED-IN-CYBERSECURITY Question #461: Real Exam Question with Answer & Explanation

Question

Which of the following options describes a possible enrollment process in a high-security environment?

Options

• AIssuing a badge and assign the employee a fixed location within the facility as an identifier
• BIssuing a badge and collect the employee's religious history for record keeping
• CIssuing a badge and allow the employee to choose their own identifiers
• DIssuing a badge with the employee's credentials, possibly including biometrics

Explanation

In a high-security environment, the enrollment process often involves the issuance of a badge with the employee's identifiers and possibly biometric characteristics. This process ensures that the individual is uniquely identifiable and can be accurately authenticated by the access control system (see the ISC2 Study Guide, Chapter 3, Module 2). For example, an organization might issue an employee a badge that contains his or her photo, name, and a unique barcode or RFID chip. The badge could also contain biometric data, such as a fingerprint or iris scan, that the access control system can use to authenticate the employee. Allowing the employee to choose his or her identifiers can result in duplicate or easily guessable identifiers, which would weaken the security of the access control system. Assigning the employee a fixed location within the facility as an identifier would not be practical or effective for authentication purposes. Finally, collecting the employee's religious history for recordkeeping purposes is irrelevant to the access control system and would raise privacy concerns.

No community discussion yet for this question.