CompTIA Network+ (N10-008) — Question 702

A software developer changed positions within a company and is now a sales engineer. The security team discovered that the former software developer had been modifying code to implement small features requested by customers. Which of the following would be the best thing for the security administrator to implement to prevent this from happening?

Answer options

• A. A software patching policy
• B. A role-based access control policy
• C. Firewalls on the software development servers
• D. Longer and more complex password requirements

Correct answer: B

Explanation

Implementing a role-based access control policy is essential because it restricts access to sensitive systems based on the user's role, preventing unauthorized modifications. The other options, such as a software patching policy or firewalls, do not directly address the issue of role-specific access, while longer password requirements do not mitigate the risk of inappropriate access by someone in a different role.