Security Fundamentals Professional Certification (SFPC) Practice Test Flash Cards

In a discussion about security procedures, who is correct if one states visits must serve a specific government purpose and the other states that identity verification and need-to-know is essential?