nerdexam
CompTIA

220-1102 · Question #590

A healthcare organization wants to provide iPads to the nursing staff. Which of the following accounts would provide the least privilege to the users?

The correct answer is A. Guest. To enforce the principle of least privilege, a guest account is typically configured with the fewest permissions and limited access to system resources. This is ideal for scenarios where users need basic functionality without administrative capabilities.

Security

Question

A healthcare organization wants to provide iPads to the nursing staff. Which of the following accounts would provide the least privilege to the users?

Options

  • AGuest
  • BRoot
  • CSuperuser
  • DAdministrator

How the community answered

(41 responses)
  • A
    93% (38)
  • C
    5% (2)
  • D
    2% (1)

Why each option

To enforce the principle of least privilege, a guest account is typically configured with the fewest permissions and limited access to system resources. This is ideal for scenarios where users need basic functionality without administrative capabilities.

AGuestCorrect

A Guest account is specifically designed to provide the lowest level of privileges, offering limited access to system resources and no administrative capabilities. This aligns with the principle of least privilege, ensuring users only have the necessary permissions for their tasks, which is critical in a healthcare setting to protect sensitive data.

BRoot

Root is the highest-privilege user account in Unix-like operating systems (including iOS/iPadOS if jailbroken), granting full control over the system, which violates the principle of least privilege.

CSuperuser

Superuser is synonymous with root or administrator, providing extensive privileges and full control over the system, which is inappropriate for a standard user account.

DAdministrator

An Administrator account has elevated privileges, allowing users to make significant system changes, install software, and manage other accounts, which is far more access than a nursing staff member typically needs for an iPad.

Concept tested: Principle of least privilege - user accounts

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-the-principle-of-least-privilege

Topics

#Least privilege#User accounts#Access control#Security principles

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice