ISC2 ISSAP Exam - Topic 4 Question 41 Discussion

Actual exam question for ISC2's ISSAP exam

Question #: 41
Topic #: 4

Access control systems enable an authority to control access to areas and resources in a given physical facility or computer-based information system. Which of the following services provided by access control systems is used to determine what a subject can do?

AAuthentication

BAuthorization

CAccountability

DIdentification

Show Suggested Answer

Suggested Answer: B

Identification and authentication determine who can log on to a system, and the association of users with the software subjects that

they are able to control as a result of logging in.

Authorization determines what a subject can do.

Accountability identifies what a subject (or all subjects associated with a user) did.

by Lettie at May 04, 2022, 09:10 AM

Limited Time Offer

25%

Off

Get Premium ISSAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Penney

5 months ago

Accountability is important too, but not for this question.

upvoted 0 times

...

Harrison

6 months ago

Wait, are we sure about that? Seems tricky.

upvoted 0 times

...

Edmond

6 months ago

Yeah, Authorization is the key here.

upvoted 0 times

...

Buffy

6 months ago

I thought it was Authentication at first.

upvoted 0 times

...

Ona

6 months ago

It's definitely Authorization!

upvoted 0 times

...

Quiana

6 months ago

I vaguely recall that Identification is the first step, but it doesn't really tell you what actions are allowed. Authorization seems like the right choice.

upvoted 0 times

...

Raymon

6 months ago

I feel like I mixed up Accountability and Authorization in practice questions before. I hope I remember the right one this time!

upvoted 0 times

...

Juliann

6 months ago

I remember studying that Authentication is about verifying identity, while Authorization determines permissions. So, I believe it's definitely Authorization.

upvoted 0 times

...

Salina

6 months ago

I think the answer might be Authorization since it relates to what a user can do, but I'm not completely sure.

upvoted 0 times

...

Isaiah

6 months ago

This question seems straightforward, but I want to make sure I understand the key terms "inspiration", "ideation", and "implementation" before answering.

upvoted 0 times

...

Melvin

6 months ago

This is a good question. I'll draw on my understanding of Scrum principles to analyze the factors and select the best option.

upvoted 0 times

...

Sheridan

6 months ago

Hmm, I'm stuck between A and C. I know nonpublic records have specific disclosure rules, but I'm not 100% certain.

upvoted 0 times

...