💡 1. A. Users can only see certain screens in the system. – ᤶ ᤷ Not a concern o This is actually a good security practice because it enforces role-based access control (RBAC). o Limiting access to specific screens ensures that users only see what is necessary for their job functions. 2. B. Users are making frequent password change requests. – ᤶ ᤷ Not related to authorization controls o This is more of an authentication issue rather than an authorization concern. o Frequent password resets could indicate forgotten passwords or a strict password policy, but it does not relate to how access is granted within the system. 3. C. Users input incorrect passwords and get denied system access. – ᤶ ᤷ Not a concern o This shows that authentication controls are working properly by blocking unauthorized access. o Authorization issues relate to what users can access after authentication, not whether they can log in. 4. D. Users are all permitted uniform access to the system. – ࿨ ࿩ ࿪ Correct Answer o Authorization controls should enforce role- based access, meaning users should only have access to functions relevant to their roles. o If all users have uniform access, this creates a security risk because:  Employees might access sensitive or confidential information they don’t need.  Unauthorized users could modify, delete, or misuse critical data. o Proper authorization should follow the principle of least privilege (PoLP), ensuring that users only have the minimum access required to perform their tasks.