Which authentication practices are mandated for access to documents under UAP Document 301?

Which authentication practices are mandated for access to documents under UAP Document 301?

• A. Use single-factor passwords only and never review credentials.
• B. Disable password changes to simplify management.
• C. Enforce multi-factor or strong authentication where available; enforce strong passwords and regular credential reviews.
• D. Permit anonymous access to sensitive documents.

Answer: (C)

Access to documents under UAP Document 301 should be protected with layered, robust authentication controls. The best practice is to require multi-factor or strong authentication wherever available, and to pair that with strong password requirements plus regular reviews of who has access. MFA adds an extra barrier beyond a password, so even if a password is compromised, another factor (like a one-time code or a hardware token) is still needed to gain entry. Strong passwords reduce the likelihood of guessable or reused credentials. Regular credential reviews ensure that people who no longer need access—whether because of a role change or departure—are promptly removed or adjusted, preventing lingering or unnecessary permissions. Why the other options don’t fit: relying on a single-factor password without any review leaves accounts vulnerable to theft or misuse; disabling password changes to simplify management weakens security and increases risk if a credential is compromised; allowing anonymous access bypasses authentication entirely and exposes sensitive documents to anyone. In short, combining MFA or strong authentication with strict password standards and ongoing access review provides the most reliable protection for sensitive documents.

Access to documents under UAP Document 301 should be protected with layered, robust authentication controls. The best practice is to require multi-factor or strong authentication wherever available, and to pair that with strong password requirements plus regular reviews of who has access. MFA adds an extra barrier beyond a password, so even if a password is compromised, another factor (like a one-time code or a hardware token) is still needed to gain entry. Strong passwords reduce the likelihood of guessable or reused credentials. Regular credential reviews ensure that people who no longer need access—whether because of a role change or departure—are promptly removed or adjusted, preventing lingering or unnecessary permissions.

Why the other options don’t fit: relying on a single-factor password without any review leaves accounts vulnerable to theft or misuse; disabling password changes to simplify management weakens security and increases risk if a credential is compromised; allowing anonymous access bypasses authentication entirely and exposes sensitive documents to anyone.

In short, combining MFA or strong authentication with strict password standards and ongoing access review provides the most reliable protection for sensitive documents.