220-1102 · Question #590
A healthcare organization wants to provide iPads to the nursing staff. Which of the following accounts would provide the least privilege to the users?
The correct answer is A. Guest. To enforce the principle of least privilege, a guest account is typically configured with the fewest permissions and limited access to system resources. This is ideal for scenarios where users need basic functionality without administrative capabilities.
Question
A healthcare organization wants to provide iPads to the nursing staff. Which of the following accounts would provide the least privilege to the users?
Options
- AGuest
- BRoot
- CSuperuser
- DAdministrator
How the community answered
(41 responses)- A93% (38)
- C5% (2)
- D2% (1)
Why each option
To enforce the principle of least privilege, a guest account is typically configured with the fewest permissions and limited access to system resources. This is ideal for scenarios where users need basic functionality without administrative capabilities.
A Guest account is specifically designed to provide the lowest level of privileges, offering limited access to system resources and no administrative capabilities. This aligns with the principle of least privilege, ensuring users only have the necessary permissions for their tasks, which is critical in a healthcare setting to protect sensitive data.
Root is the highest-privilege user account in Unix-like operating systems (including iOS/iPadOS if jailbroken), granting full control over the system, which violates the principle of least privilege.
Superuser is synonymous with root or administrator, providing extensive privileges and full control over the system, which is inappropriate for a standard user account.
An Administrator account has elevated privileges, allowing users to make significant system changes, install software, and manage other accounts, which is far more access than a nursing staff member typically needs for an iPad.
Concept tested: Principle of least privilege - user accounts
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-the-principle-of-least-privilege
Topics
Community Discussion
No community discussion yet for this question.