(ISC)2 Certified in Cybersecurity Practice Exam

What security concept is being applied when Larry and Fern both present different keys to enter the data center?

1. Defense in depth

2. Segregation of duties

3. Least privilege

4. Dual control

The correct answer is: Dual control

The scenario describes the application of dual control, which is a security concept that requires two or more individuals to complete a critical task or access a sensitive area or system. This approach enhances security by ensuring that no single person has full control or access to sensitive functions or areas, thus reducing the risk of fraud, error, or unauthorized access. In the given situation, Larry and Fern both need to present different keys to enter the data center, which illustrates dual control. It ensures that both individuals must be present for access to occur, thereby promoting accountability and security in sensitive situations. The other concepts mentioned are significant in different contexts: defense in depth involves layering various security measures to protect information, segregation of duties focuses on dividing responsibilities to minimize the chance of malicious acts, and least privilege ensures users have only the minimum permissions necessary to perform their tasks. However, none of these directly capture the essence of the requirement for both Larry and Fern to present their keys for access, making dual control the most accurate answer.