Exam PAM-DEF All QuestionsBrowse all questions from this exam
Question 87

Which master policy settings ensure non-repudiation?

    Correct Answer: B

    Enforcing check-in/check-out exclusive access ensures that only one user can access an account at a time, providing a clear audit trail of who accessed the account and when. Enforcing one-time password access means that the password for an account is changed every time it is used, ensuring that passwords cannot be reused. Together, these settings provide non-repudiation by ensuring there is a clear record of account access and that each password is used only once.

Discussion
TakumiOption: B

The answer is B. Enforcing check-in/check-out exclusive access ensures that only one user can access an account at a time. This means that when a user checks out an account, no other user can access it until it is checked back in. This provides an audit trail of who accessed the account and when. Enforcing one-time password access means that the password for an account is changed every time it is used. This ensures that even if a password is compromised, it can only be used once and will not be valid for future access attempts. Together, these settings provide non-repudiation by ensuring that there is a clear record of who accessed an account and when, and by ensuring that passwords cannot be reused.