Information Technology Infrastructure Library (ITIL) Foundation Practice Exam

What is the primary objective of access management?

1. To provide the right for users to use a service at all times

2. To align IT security with business security

3. To provide appropriate rights for accessing services

4. To ensure IT services can be resumed in a disaster

The correct answer is: To provide appropriate rights for accessing services

Access management is primarily concerned with ensuring that users have the appropriate rights to access services and resources based on their specific roles and needs. This involves granting, modifying, and revoking access rights to ensure that users can only access those services for which they are authorized. It is fundamentally about access control, preventing unauthorized access while enabling legitimate users to perform their tasks efficiently and securely. This function is crucial for maintaining security and safeguarding sensitive information, as well as complying with relevant regulations and policies. By focusing on providing appropriate access rights, organizations can minimize the risk of data breaches and ensure that users can work effectively within the constraints of their designated access privileges. The other options, while relevant to IT and security practices, do not precisely capture the core objective of access management itself, which is specifically about managing user permissions effectively.