Which technique provides a secure operating system with access controls for user applications in a financial institution?

The correct technique for providing a secure operating system with access controls for user applications in a financial institution is SELinux. SELinux, which stands for Security-Enhanced Linux, is a security architecture integrated into the Linux operating system that uses mandatory access controls (MAC) to enforce the separation of information based on the policies defined by the system administrator. This capability is critical in a financial context where sensitive data needs to be protected against unauthorized access and potential threats.

SELinux enables fine-grained access controls at the process and file levels, ensuring that applications only have the permissions they explicitly need to function. This principle of least privilege is vital in environments that handle sensitive financial data, helping to mitigate risks associated with vulnerabilities and unintended system behaviors.

While multifactor authentication is significant for verifying user identities, it does not provide the same level of control over application behavior and system security as SELinux does. Regular vulnerability assessments and penetration testing are essential for identifying and rectifying security weaknesses but do not intrinsically secure the operating system itself. Windows 10, while it offers some security features and user controls, does not provide the same level of customizable access control and enforcement model as SELinux, particularly in specialized financial environments that require stringent security measures.