Which action demonstrates that authentication policies are distributed and understood by users?

• A. Interview A Sample Of Users To Verify Familiarity
• B. Store The Policy In A Secure Archive Not Accessible To Users
• C. Only IT Staff Sign The Policy And No Distribution Occurs
• D. Policies Are Updated Quarterly But Not Communicated

Answer: (A)

You need evidence that users actually know and follow the authentication rules. Interviewing a sample of users to verify familiarity provides exactly that: it shows the policy has reached people and that they understand what it requires. This firsthand check demonstrates both distribution and comprehension in practice.

Storing the policy in a secure archive that users can’t access doesn’t show that people were informed or understand the rules. When only IT staff sign the policy and nothing is distributed, there’s no way to prove users are aware. And updating the policy quarterly but not communicating those changes means users likely don’t know what to follow, so understanding isn’t demonstrated.