Which activity would be considered 'exceeding authorized access' under the CFAA?

• A. Accessing data you are allowed to access but using it for an unauthorized purpose
• B. Accessing a system without any permission
• C. Copying publicly available data
• D. Logging into someone else’s account with permission

Answer: (A)

Exceeding authorized access means you have permission to access the data or system, but you use that access for a purpose that isn’t allowed. The scenario described matches this: you’re allowed to access the data, but you use it for an unauthorized purpose. For example, someone who can view certain files uses them for personal gain or to harm the organization. The other options don’t fit because one involves no permission at all, another involves data that’s publicly available, and the last involves logging into someone else’s account with permission for legitimate use—none of those involves using authorized access for an unauthorized purpose.