CompTIA SY0-701 Exam - Topic 2 Question 34 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 34
Topic #: 2

A security engineer at a large company needs to enhance IAM to ensure that employees can only access corporate systems during their shifts. Which of the following access controls should the security engineer implement?

ARole-based

BTime-of-day restrictions

CLeast privilege

DBiometric authentication

Show Suggested Answer

Suggested Answer: B

Time-of-day restrictions limit access to corporate systems based on predefined schedules. This ensures employees can only access resources during their assigned work hours. Reference: CompTIA Security+ SY0-701 Study Guide, Domain 3: Security Architecture, Section: 'Access Control Models'.

by Rosio at Feb 08, 2025, 09:25 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kenneth

7 months ago

Biometric authentication is cool, but not really relevant for shift access.

upvoted 0 times

...

Glennis

8 months ago

Wait, can you really restrict access just by time? Sounds tricky!

upvoted 0 times

...

Aaron

8 months ago

Least privilege is crucial, but not the best fit for this scenario.

upvoted 0 times

...

Pearline

8 months ago

I think role-based access is more effective overall.

upvoted 0 times

...

Shawna

8 months ago

Time-of-day restrictions make the most sense here.

upvoted 0 times

...

Alexis

9 months ago

Biometric authentication sounds cool, but I doubt it helps with the timing aspect of access control.

upvoted 0 times

...

Solange

9 months ago

I practiced a similar question where least privilege was emphasized, but I don't think it directly addresses the shift timing issue.

upvoted 0 times

...

Cornell

9 months ago

I’m not entirely sure, but I think role-based access controls might not be specific enough for this scenario.

upvoted 0 times

...

Glory

9 months ago

I remember discussing time-of-day restrictions in class; it seems like the best fit for limiting access during shifts.

upvoted 0 times

...

Cherri

9 months ago

Time-of-day restrictions seem like the obvious choice to me. That way, employees can only access systems during their scheduled shifts, which is exactly what the question is asking for.

upvoted 0 times

...

Rima

9 months ago

I'm a bit confused. Wouldn't least privilege be a better option to ensure employees only have access to what they need? Or is time-of-day the more appropriate control here?

upvoted 0 times

...

Pamella

9 months ago

Okay, I've got this. The key is to implement time-of-day restrictions to limit access to corporate systems based on employee schedules. That should do the trick.

upvoted 0 times

...

Ozell

9 months ago

Hmm, I'm a bit unsure here. Is time-of-day the best approach, or should I consider role-based access control as well? I'll need to think this through carefully.

upvoted 0 times

...

Allene

9 months ago

This seems like a straightforward question. I'd go with time-of-day restrictions to ensure employees can only access systems during their scheduled shifts.

upvoted 0 times

...

Charlene

1 year ago

This question is a real time-suck! I think the security engineer should just implement a system where employees have to do the Macarena every time they log in. That'll keep 'em on their toes!

upvoted 0 times

...

Mabel

1 year ago

Role-based access control is a classic, but it might not be flexible enough for this scenario. Time-of-day restrictions are the way to go, in my opinion.

upvoted 0 times

Crista

1 year ago

Biometric authentication could be a good additional layer of security, but time-of-day restrictions are essential in this case.

upvoted 0 times

...

Kendra

1 year ago

Role-based access control might not be enough to restrict access to specific times.

upvoted 0 times

...

Galen

1 year ago

I agree, it would ensure that employees can only access systems during their shifts.

upvoted 0 times

...

Freeman

1 year ago

I think time-of-day restrictions would be the best option for this situation.

upvoted 0 times

...

Kathrine

1 year ago

Least privilege is a good idea, but it might be a bit of a hassle for employees to manage all their permissions. Time-of-day restrictions seem more straightforward.

upvoted 0 times

Keneth

1 year ago

But role-based access control could also be useful in this situation to limit access based on job responsibilities.

upvoted 0 times

...

Lino

1 year ago

I agree, time-of-day restrictions would be easier to manage for employees.

upvoted 0 times

...

Glory

1 year ago

Biometric authentication seems like a great choice. It's more secure than passwords and ensures only authorized personnel can access the systems.

upvoted 0 times

...

Isaiah

1 year ago

I think role-based access control would also be important to limit access to only what is necessary for each employee.

upvoted 0 times

...

Lili

1 year ago

I think time-of-day restrictions would be the best option. It keeps our systems secure while ensuring employees can access what they need during their shifts.

upvoted 0 times