Which measure best controls access for high-level data?

Which measure best controls access for high-level data?

• A. Boundary firewall
• B. Access control
• C. Patch management
• D. Staff training

Answer: (B)

Controlling access to sensitive data is about enforcing who is allowed to view or use it and under what conditions. This is handled through access control, which combines authentication (verifying identity) and authorization (granting permissions). By assigning roles or clearance levels and applying the principle of least privilege, only those who genuinely need to see the high-level data can access it, and their actions can be tracked. A boundary firewall helps block unauthorized traffic from outside the network, but it doesn’t govern who inside the system can access specific data or enforce fine-grained permissions. Patch management keeps software secure by fixing vulnerabilities, yet it doesn’t limit who can read or modify data. Staff training reduces risky behavior, but it can’t enforce access rights or prevent misuse on its own. Therefore, implementing robust access control directly regulates who can access high-level data and what they can do with it, making it the most effective measure.

Controlling access to sensitive data is about enforcing who is allowed to view or use it and under what conditions. This is handled through access control, which combines authentication (verifying identity) and authorization (granting permissions). By assigning roles or clearance levels and applying the principle of least privilege, only those who genuinely need to see the high-level data can access it, and their actions can be tracked.

A boundary firewall helps block unauthorized traffic from outside the network, but it doesn’t govern who inside the system can access specific data or enforce fine-grained permissions. Patch management keeps software secure by fixing vulnerabilities, yet it doesn’t limit who can read or modify data. Staff training reduces risky behavior, but it can’t enforce access rights or prevent misuse on its own. Therefore, implementing robust access control directly regulates who can access high-level data and what they can do with it, making it the most effective measure.