Câu 44: CAS-005: CompTIA SecurityX

A security officer is requiring all personnel working on a special project to obtain a security clearance requisite with the level of all information being accessed. Data on this network must be protected at the same level of each clearance holder. The need to know must be verified by the data owner. Which of the following should the security officer do to meet these requirements?

1. A. Create a rule to authorize personnel only from certain IPs to access the files.
2. B. Assign labels to the files and require formal access authorization. — đáp án hiện tại
3. C. Assign attributes to each file and allow authorized users to share the files.
4. D. Assign roles to users and authorize access to files based on the roles.