27. A manager calls the help desk to ask for assistance with creating a more secure environment for the finance department, which resides in a non-domain environment. Which of the following is the best method to protect against unauthorized use?
Answer: B
Restricting user permissions is the best method to protect against unauthorized use.
Restricting user permissions effectively limits the access that individuals have to sensitive information and resources, which is crucial in a non-domain environment where security risks can be higher.
A) Implementing password expiration
While implementing password expiration can enhance security by ensuring that users change their passwords regularly, it does not directly prevent unauthorized access if user permissions are not properly managed. In a non-domain environment, users could still have broad access to sensitive information even with expired passwords.
B) Restricting user permissions
This option is the most effective method to safeguard against unauthorized use, as it ensures that only authorized personnel have access to specific data and resources. By setting strict permissions based on roles and responsibilities, the finance department can minimize the risk of data breaches and unauthorized access.
C) Using screen locks
Using screen locks can help secure individual workstations when users are away, but it does not address the underlying issue of unauthorized access to sensitive information. If users have excessive permissions, locked screens will not prevent unauthorized users from accessing data once the screen is unlocked.
D) Disabling unnecessary services
Disabling unnecessary services can improve overall security by reducing potential attack vectors. However, this measure does not provide direct protection against unauthorized access to financial data. It is more of a preventive measure rather than a method to control user permissions.
Conclusion
Restricting user permissions stands out as the most effective strategy to protect against unauthorized access, especially in a non-domain environment. While other options like password expiration and screen locks contribute to security, they do not offer the same level of control over who can access sensitive information. Properly managing user permissions directly mitigates the risk of unauthorized use, making it the best choice in this scenario.