Which measure restricts access so only a limited number of staff can access, edit, add or delete data?

Which measure restricts access so only a limited number of staff can access, edit, add or delete data?

• A. Hardware encryption
• B. Patch management
• C. Access control
• D. Boundary firewall

Answer: (C)

Access control is the measure that restricts who can access data and what they can do with it. It sets permissions so only specific staff can view, edit, add, or delete information, following the principle of least privilege. This is typically implemented with user accounts and roles (like RBAC), ensuring that each person has exactly the access they need. Hardware encryption protects data content if someone gains physical access, but it doesn’t manage which users can perform actions inside a system. Patch management keeps software up to date to reduce vulnerabilities, not to limit data permissions. A boundary firewall controls network traffic, helping block unauthorized access from outside, but it doesn’t provide granular, inside-system access rights for individual staff members. So access control best meets the goal of restricting data operations to a limited group.

Access control is the measure that restricts who can access data and what they can do with it. It sets permissions so only specific staff can view, edit, add, or delete information, following the principle of least privilege. This is typically implemented with user accounts and roles (like RBAC), ensuring that each person has exactly the access they need.

Hardware encryption protects data content if someone gains physical access, but it doesn’t manage which users can perform actions inside a system. Patch management keeps software up to date to reduce vulnerabilities, not to limit data permissions. A boundary firewall controls network traffic, helping block unauthorized access from outside, but it doesn’t provide granular, inside-system access rights for individual staff members. So access control best meets the goal of restricting data operations to a limited group.