Which statement best reflects ID controls for administration and access?

• A. Generic User IDs Are Enabled For Convenience
• B. Shared IDs Exist For Administrators
• C. Generic User IDs Are Disabled And Shared IDs Do Not Exist For Admin Functions
• D. Group IDs Must Be Used For All Admin Tasks

Answer: (C)

The main idea is that administration and access should be traced to individual identities. Having unique user IDs for every administrator ensures that each action is tied to a specific person, which is essential for accountability and auditing. Disabling generic user IDs and avoiding shared admin IDs prevents multiple people from using the same credentials, so you can tell who did what. Using group or shared identities would blur responsibility, making it impossible to pinpoint the actor behind each action. So the best approach is to have no generic IDs for admins and no shared admin IDs, with each administrator using their own unique credentials.