A sample access control requirement would be:
A)Customer service reps can modify customer files but not delete them
B)Data will be encrypted for secure ordering
C)All uploaded files will be checked for viruses
D)The system will cost $38,900 per minute of downtime in lost revenues
E)None of the above

Question

Quizplus · Accepted Answer

This is a clear and specific access control requirement, stating that customer service reps have the ability to modify customer files, but not to delete them. This is an example of setting specific access controls to limit the potential for unauthorized or accidental data loss.

B, C, and D are not access control requirements. B is a data encryption requirement, C is a virus scanning requirement, and D is a statement about the cost of downtime. While all of these may be important considerations for a system, they are not directly related to access control.

E is not a valid answer because it does not provide any specific choice.

A Sample Access Control Requirement Would Be