Cisco Cyber Security Practice Exam

What access control strategy prevents employees from accessing the payroll file after hours or on weekends?

1. Time-based access control

2. Rule-based access control

3. Mandatory access control

4. Role-based access control

The correct answer is: Rule-based access control

The correct answer is time-based access control. This strategy specifically regulates access based on time constraints, allowing or denying access to resources during specified periods. In the scenario presented, time-based access control would effectively restrict access to the payroll file, ensuring that employees are only able to access it during designated working hours, thus maintaining security and compliance with organizational policies. By implementing this approach, an organization can mitigate risks associated with unauthorized access to sensitive information, especially during off-hours when oversight may be reduced. This control is particularly beneficial for safeguarding critical files and ensuring that access aligns with operational requirements. The other strategies mentioned, while relevant to various security contexts, do not directly address the requirement of limiting access based on specific time frames. This distinction highlights the unique effectiveness of time-based access control in managing when users can reach particular resources.