SFPC Information Security Practice Exam

Which statement best describes the need-to-know principle for access to classified information?

Access is granted only if there is a need-to-know Access granted only if there is a need-to-know and authorization Based on job title Random

Correct Answer:

Access is granted only if there is a need-to-know

Explanation:

Access to classified information is governed by the need-to-know principle: people are allowed to see only what they must know to perform their duties. This focus on actual responsibilities ensures sensitive details aren’t exposed to those who don’t need them, reducing the risk of leakage. Even with a security clearance or a high-level position, access should be limited to what is necessary for the task at hand. In many policies, authorization is also required in addition to demonstrating a need to know, but the core idea is restricting access to what is required. Choices that rely on job title alone or grant access randomly don’t fit because they either overshare or have no basis for access.

Access more questions from this quiz

Continue to SFPC Information Security Practice Exam for more practice questions and the full quiz experience.

Access More Questions