Access Control Implementation for Office Building Authentication | CompTIA Security+

Authenticate Users by Location for Enhanced Security | CompTIA Security+

Prev Question Next Question

Question

A technician needs to implement a system which will properly authenticate users by their username and password only when the users are logging in from a computer in the office building.

Any attempt to authenticate from a location other than the office building should be rejected.

Which of the following MUST the technician implement?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B.

The technician needs to implement a solution that restricts access to the system based on the location of the user. This type of solution is known as network access control (NAC).

Out of the given options, the only one that can provide location-based access control is "Transitive authentication."

Transitive authentication is a process where the authentication decision is based on the user's location. In this case, the authentication server checks the user's IP address to determine if it is within the range of the office building's network. If the user is logging in from an IP address outside of the office building's range, the authentication server will reject the request.

Dual factor authentication (A) and biometric authentication (D) are additional security measures used to verify the user's identity. They do not provide location-based access control.

Single factor authentication (C) only requires one form of authentication, such as a username and password. While this may be suitable for some scenarios, it does not provide location-based access control.

Therefore, the correct answer is B. Transitive authentication.