CompTIA Security+ SY0-701 Practice Question
A financial services company needs to limit access to its confidential financial records stored on a shared server. Only employees in the Finance department should be able to view and modify these records, while all other staff members should be prevented from accessing them. What method should the network administrator use to enforce these permissions?
Configure network access based on the IP addresses of Finance department devices.
Assign read access to all employees but restrict write access to the Finance group.
Implement multi-factor authentication for accessing the financial records.
Define permissions that grant the Finance group read and write access while denying access to all other users.