Question

​You work for a company that is growing. Originally, all the users in all departments had access to all the data in the database. It is considered a security risk. What is an appropriate action to reduce the risk?a. Install and provide stronger anti-virus software on the users' computers.b. Assign roles and privileges to users so that only job-relevant data is accessible to the user.c. Tweak the firewall parameters so that outgoing traffic can be better controlled.d. Install a two-step login procedure, where the user has to key in additional information for logging in.

Answer 1

Answer:

B. Assign roles and privileges to users so that only job-relevant data is accessible to the user.

Explanation:

Certain departments will require certain information for certain processes. It is not recommendable for every user to access every information of the company as it may reveal vital information.

Hence, every role and department should be given certain privileges to information according to the tasks and needs of the role.