What must you authenticate with the building custodian before authorizing access to the building?

What must you authenticate with the building custodian before authorizing access to the building?

• A. Photo ID and password
• B. Building pass and badge
• C. Security clearance level and work order
• D. Owner/user security using last 6 of SSN and authentication matrix

Answer: (D)

Verifying entry relies on confirming who the person is and what they’re allowed to do. In this approach, you validate the individual by using the owner/user security tied to the last six digits of the SSN, then apply an authentication matrix that maps that person to the specific access they are authorized to have. The last six digits of the SSN serve as a unique personal identifier to confirm identity, while the authentication matrix enforces the organization’s access rules and ensures the person’s granted role matches the area they’re trying to enter. This two-part check strengthens security because even someone who knows a partial identifier must also have an approved level of access reflected in the matrix. Other methods don’t provide the same combination of verified identity and policy-based authorization: they either rely on credentials that can be compromised, or on passes that don’t confirm current authorization, or on clearance or work orders without tying them to the exact access rights at the moment of entry.

Verifying entry relies on confirming who the person is and what they’re allowed to do. In this approach, you validate the individual by using the owner/user security tied to the last six digits of the SSN, then apply an authentication matrix that maps that person to the specific access they are authorized to have. The last six digits of the SSN serve as a unique personal identifier to confirm identity, while the authentication matrix enforces the organization’s access rules and ensures the person’s granted role matches the area they’re trying to enter. This two-part check strengthens security because even someone who knows a partial identifier must also have an approved level of access reflected in the matrix. Other methods don’t provide the same combination of verified identity and policy-based authorization: they either rely on credentials that can be compromised, or on passes that don’t confirm current authorization, or on clearance or work orders without tying them to the exact access rights at the moment of entry.