An employee, Alex, needs access to a critical database containing sensitive project files. Alex's role requires read-only access to specific project folders, not full control over the entire database. What security principle is most relevant?单项选择题
A
Encryption.
B
Intrusion detection.
C
Authorization.
D
Authentication.

Question

An employee, Alex, needs access to a critical database containing sensitive project files. Alex's role requires read-only access to specific project folders, not full control over the entire database. What security principle is most relevant?单项选择题

A

Encryption.

B

Intrusion detection.

C

Authorization.

D

Authentication.

BlackTom AI · Accepted Answer

Authorization determines which resources a successfully identified user can access and what actions they can perform, so it directly controls read, write, and execute privileges on specific data.

1. Relevant knowledge points and concepts
- Authorization: the process of granting or denying specific permissions (read, write, execute) to an authenticated identity. Implemented via access control models (RBAC, ABAC, DAC/MAC).
- Authentication: proving identity (passwords, MFA); it does not by itself specify allowed actions.
- Principle of least privilege: users get only the minimum permissions required for their role.
- Encryption: protects data confidentiality/integrity in storage or transit but does not manage which users can perform which operations.
- Intrusion detection: monitors for malicious activity or breaches; it is reactive/detective, not an access control mechanism.

2. Step-by-step reasoning
- Alex needs access to a critical database but only read-only privileges for specific project folders.
- First, Alex must be identified (authentication), but identification alone does not permit operations.
- The system must enforce rules that allow Alex to read certain folders while preventing write or administrative actions. That enforcement of permitted operations is authorization.
- Applying least privilege, the authorization policy should give Alex only those read permissions and nothing more.

3. Intermediate logical steps (no numeric calculations)
- Identify requirement: "read-only access to specific project folders" -> translates to access control rule(s).
- Determine mechanism: define role or attribute mapping granting read permission and denying write/control -> authorization policies/RBAC or ACL entries.
- Confirm enforcement: system checks Alex’s authenticated identity against authorization policies before permitting file access.

4. Why the correct answer is correct
Authorization is the security principle that maps identities to permitted actions and resources; it is the exact mechanism needed to restrict Alex to read-only access on selected folders.

5. Why other options are incorrect
- Authentication: necessary to identify Alex, but does not specify or enforce read vs write permissions.
- Encryption: protects data confidentiality in storage/transfer but doesn’t control who may read vs modify within the system.
- Intrusion detection: monitors for attacks or anomalies; it does not grant or restrict normal user privileges.

6. Conclusion
The correct answer is Authorization, which matches the provided answer.

An employee, Alex, needs access to a critical database containing sensitive project files. Alex's role requires read-only access to specific project folders, not full control over the entire database. What security principle is most relevant?单项选择题

类似问题

What are user permissions?

What are user permissions?

In order to achieve the system protection, a process should access

During an audit of an internally developed, web-based purchase approval application, an IS auditor discovers that all business users share a common access profile. Which of the following is the MOST important recommendation for the IS auditor to include in the report?

A company recently hired you as a system administrator. You notice that some accounts that were set up for temporary employees who are no longer working at the company are currently enabled. Which of the following is the BEST thing to do?

What are user permissions?

An auditor is reviewing whether employees who accessed the HR database last month used that access only for approved purposes. This review is most closely related to the data security principle of _____.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单