Module Questions 8
1. Why is MFA significantly more secure than a password alone?
Answer :
Multi-Factor Authentication (MFA) is significantly more secure than a password alone because it adds multiple layers of defense based on different categories of evidence: something you know (password), something you have (a physical token or smartphone), or something you are (fingerprint or facial recognition). Even if a hacker successfully steals or guesses a password through a data breach or phishing, they still cannot gain access without the second factor. This effectively neutralizes the most common cyberattacks, as the likelihood of an attacker compromising two different types of credentials simultaneously is extremely low.
2. Explain Role-Based Access Control (RBAC) and how it helps enforce the principle of least privilege.
Answer :
Role-Based Access Control (RBAC) is a method of restricting network access based on the roles of individual users within an enterprise. Instead of assigning permissions to each person manually, access is granted to specific “roles” (e.g., “Finance Manager” or “Marketing Intern”). RBAC helps enforce the Principle of Least Privilege by ensuring that users only have access to the data and tools strictly necessary for their specific job functions. For example, a marketing intern would not have permission to access the company’s payroll database, preventing accidental or intentional data misuse and minimizing the “attack surface” if an account is compromised.
3. What are the security risks associated with not deactivating employee accounts immediately after they leave the company?
Answer :
Failing to deactivate employee accounts immediately after they leave the company creates “Orphaned Accounts,” which pose severe security risks. A disgruntled former employee could use their still-active credentials to steal intellectual property, delete critical business data, or sabotage internal systems. Furthermore, these unmonitored accounts are prime targets for hackers, who can hijack them to gain a “backdoor” into the company’s network without being noticed by standard security alerts. Immediate deprovisioning is a critical part of the Offboarding Process to maintain the integrity of the business’s digital perimeter.
Status: 100% terpenuhi
Keterangan: sudah mengerjakan tugas dengan baik dan benar.