SG0-001 · Question #352
Which of the following BEST prevents unauthorized access to storage data via a username/password?
The correct answer is A. ACL. Access Control Lists (ACLs) are the most effective method for preventing unauthorized access to storage data based on user credentials like a username and password, as they define specific permissions for users and groups.
Question
Which of the following BEST prevents unauthorized access to storage data via a username/password?
Options
- AACL
- BEncryption
- CPhysical access restrictions
- DCompression
How the community answered
(38 responses)- A92% (35)
- B3% (1)
- D5% (2)
Why each option
Access Control Lists (ACLs) are the most effective method for preventing unauthorized access to storage data based on user credentials like a username and password, as they define specific permissions for users and groups.
An Access Control List (ACL) defines which users or groups have specific permissions (read, write, execute, modify) to a file, folder, or other resource, effectively controlling access based on authentication via username and password. When a user authenticates with their credentials, the system checks the ACLs to determine if they are authorized to access the requested data.
Encryption protects data confidentiality by making it unreadable without the correct key, but it does not prevent unauthorized users from attempting to access the encrypted data using their credentials; ACLs determine who can access the data initially.
Physical access restrictions prevent unauthorized individuals from directly touching the storage hardware, which is a different layer of security than controlling access via network or OS login with a username/password.
Compression reduces data size to save disk space and has no direct function in preventing unauthorized access based on user credentials.
Concept tested: Storage access control mechanisms
Source: https://learn.microsoft.com/en-us/windows/win32/secauthz/access-control-lists
Topics
Community Discussion
No community discussion yet for this question.