Which of the following BEST describes the purpose of access management?

Question

Options

• ATo provide a channel for users to request and receive standard services
• BProvides the rights for users to be able to use a service or group of services
• CTo prevent problems and resulting Incidents from happening
• DTo detect security events and make sense of them

• A
  6% (2)
• B
  92% (33)
• C
  3% (1)

Explanation

Option B is correct because Access Management (an ITIL process) is specifically defined as the process that grants authorized users the right to use a service, while preventing access to non-authorized users - it's fundamentally about controlling who can use what.

Why the distractors are wrong:

• A describes Request Fulfillment (Service Request Management), which handles standard user requests like password resets or new equipment.
• C describes Problem Management, which proactively identifies root causes to prevent recurring incidents.
• D describes Event Management or a Security Information and Event Management (SIEM) function, focused on monitoring and interpreting security signals.

Memory tip: Think of Access Management as the bouncer at the door - its entire job is deciding who gets rights to enter (use a service). The word "rights" in option B is the giveaway; whenever you see rights + users + services, that's Access Management.

No community discussion yet for this question.