MENU
Access control systems enable an authority to control access to areas and resources in a given physical facility or computer-based information system. Which of the following services provided by access control systems is used to determine what a subject can do?
Suggested Answer: B
Get Premium ISSAP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Identification and authentication determine who can log on to a system, and the association of users with the software subjects that
they are able to control as a result of logging in.
Authorization determines what a subject can do.
Accountability identifies what a subject (or all subjects associated with a user) did.
12 comments · newest first
PE
Penney
11 months ago
Accountability is important too, but not for this question.
HA
Harrison
12 months ago
Wait, are we sure about that? Seems tricky.
ED
Edmond
12 months ago
Yeah, Authorization is the key here.
BU
Buffy
12 months ago
I thought it was Authentication at first.
ON
Ona
1 year ago
It's definitely Authorization!
QU
Quiana
1 year ago
I vaguely recall that Identification is the first step, but it doesn't really tell you what actions are allowed. Authorization seems like the right choice.
RA
Raymon
1 year ago
I feel like I mixed up Accountability and Authorization in practice questions before. I hope I remember the right one this time!
JU
Juliann
1 year ago
I remember studying that Authentication is about verifying identity, while Authorization determines permissions. So, I believe it's definitely Authorization.
SA
Salina
1 year ago
I think the answer might be Authorization since it relates to what a user can do, but I'm not completely sure.
IS
Isaiah
1 year ago
This question seems straightforward, but I want to make sure I understand the key terms "inspiration", "ideation", and "implementation" before answering.
ME
Melvin
1 year ago
This is a good question. I'll draw on my understanding of Scrum principles to analyze the factors and select the best option.
SH
Sheridan
1 year ago
Hmm, I'm stuck between A and C. I know nonpublic records have specific disclosure rules, but I'm not 100% certain.