CAS-005 · Question #102
The material findings from a recent compliance audit indicate a company has an issue with excessive permissions. The findings show that employees changing roles or departments results in privilege…
The correct answer is B. Implementing a role-based access policy E. Performing periodic access reviews. Role-based access control (RBAC) ensures that permissions are tied to job roles rather than individuals, making it easier to update or change access when someone switches roles. Periodic access reviews help detect and correct excessive permissions by regularly reviewing who has…
Question
The material findings from a recent compliance audit indicate a company has an issue with excessive permissions. The findings show that employees changing roles or departments results in privilege creep. Which of the following solutions are the best ways to mitigate this issue? (Choose two.)
Options
- ASetting different access controls defined by business area
- BImplementing a role-based access policy
- CDesigning a least-needed privilege policy
- DEstablishing a mandatory vacation policy
- EPerforming periodic access reviews
- FRequiring periodic job rotation
How the community answered
(63 responses)- A2% (1)
- B81% (51)
- C5% (3)
- D11% (7)
- F2% (1)
Explanation
Role-based access control (RBAC) ensures that permissions are tied to job roles rather than individuals, making it easier to update or change access when someone switches roles. Periodic access reviews help detect and correct excessive permissions by regularly reviewing who has access to what and removing any unnecessary privileges.
Community Discussion
No community discussion yet for this question.