What is a common method used by criminals to compromise access control?

Compromising passwords is a common method used by criminals to circumvent access control measures. Passwords serve as the first line of defense in securing access to systems and sensitive information. When criminals gain unauthorized access to passwords through various means—such as phishing attacks, keyloggers, or brute force attacks—they can easily bypass restrictions and gain illicit access to accounts, databases, or secure areas.

This method exploits the human factor and the inherent weaknesses in password management, such as poor password hygiene, reuse of passwords across multiple sites, or lack of two-factor authentication. Once a password is compromised, it can enable criminals to impersonate legitimate users, leading to unauthorized data manipulation, theft, or even identity fraud.

In contrast, the other options mentioned do not typically represent methods employed by criminals to undermine access control. Biometric scans are generally considered a strong security measure that is difficult to bypass. Creating complex algorithms is more related to developing security measures or protocols rather than compromising access itself. Implementing firewall systems is a preventative measure designed to protect networks from unauthorized access, making it a safeguard rather than a method of compromise.