Study. uk . com
  1. Home
  2. All questions
  3. Question 371

CompTIA Security+ study material · question 371 of 611

NIST's Access Control family treats access enforcement, account management, least privilege and separation of duties as separate controls. Why does that matter?

  1. Because they apply at different impact levels
  2. Because they are assessed by different auditors
  3. Because each has its own assessment, so implementing one does not evidence the others
  4. Because only one may be selected per system
Show the answer

Answer: C. Because each has its own assessment, so implementing one does not evidence the others

Distinct controls need distinct evidence; a strong enforcement mechanism says nothing about account lifecycle.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › Access Control (AC) family

Challenge yourself on this topic → Study as cards