ACCA Applied Knowledge · Business and Technology · The impact of advances in technology
An organisation wants a control that ensures that, even if a user's password is stolen, an intruder cannot easily gain access to the accounting system. Which control is most effective for this purpose?
Multi-factor authentication is most effective. It requires an additional proof of identity beyond the password, such as a one-time code, so a stolen password alone does not give access. Backups aid recovery rather than prevention, and very infrequent password changes provide little protection.
- ARequiring passwords to be changed once every five years
- BInstalling a larger monitor for each user
- CMulti-factor authenticationCorrect
- DBacking up the system nightly
Explanation
Multi-factor authentication requires a second proof of identity, such as a code sent to a phone, so a stolen password alone is insufficient. Nightly backups help recovery but do not prevent unauthorised access, and infrequent password changes give weak protection.
Did you get it right without looking?
One question tells you little. A timed set on The impact of advances in technology shows your real accuracy, how long you take and where you lose marks.
More The impact of advances in technology questions
- Which of the following is an example of a corrective control against a cyber security incident?
- A bank's finance director wants to use customer transaction data to develop targeted marketing offers. Which of the following is the most si…
- A company wants to rent software over the internet on a subscription basis, with the supplier hosting, maintaining and updating the applicat…
- A retailer analyses past sales records to find out why sales of winter coats fell by 20% last year, looking at weather, pricing and competit…
- A hospital finds that its patient records have been encrypted by criminals who demand payment before providing the key to restore access. Wh…
- Which process is the LEAST suitable for robotic process automation in its basic rule-based form?