Which technique is used to address improper access control?

Which technique is used to address improper access control?

• A. Proper authentication of users
• B. Encrypting backups
• C. Regular password policy changes
• D. Logging access events

Answer: (A)

Ensuring who is trying to access a system before granting access is fundamental to preventing improper access. Proper authentication of users verifies each person’s identity, so the system can apply the correct access rules and only allow authorized individuals to reach sensitive data or systems. Without strong authentication, it’s easy for an unauthorized user to slip in, regardless of other protections in place. Encrypting backups protects data if backups are stolen, but it doesn’t prevent someone from accessing live systems or data during normal operations. Regular password policy changes promote credential hygiene but don’t by themselves enforce who can access what or prevent unauthorized access. Logging access events helps you detect and respond to incidents, but it doesn’t stop improper access from occurring in real time. Therefore, proper authentication of users is the technique that directly addresses improper access control.

Ensuring who is trying to access a system before granting access is fundamental to preventing improper access. Proper authentication of users verifies each person’s identity, so the system can apply the correct access rules and only allow authorized individuals to reach sensitive data or systems. Without strong authentication, it’s easy for an unauthorized user to slip in, regardless of other protections in place.

Encrypting backups protects data if backups are stolen, but it doesn’t prevent someone from accessing live systems or data during normal operations. Regular password policy changes promote credential hygiene but don’t by themselves enforce who can access what or prevent unauthorized access. Logging access events helps you detect and respond to incidents, but it doesn’t stop improper access from occurring in real time.

Therefore, proper authentication of users is the technique that directly addresses improper access control.