After reviewing IAM findings from CrowdStrike CIEM, you observe the following issues: ?Multiple users have excessive permissions beyond their job requirements. ?Several accounts have been inactive for

Question

Options

• ADisable all inactive accounts and enforce MFA for all users.
• BRevoke excessive permissions and implement a role-based access control (RBAC) policy.
• CDelete all roles with administrative privileges immediately.
• DReassign administrative privileges from temporary contractors to permanent employees and

• A
  19% (4)
• B
  62% (13)
• C
  5% (1)
• D
  14% (3)

Explanation

Option A: Disabling inactive accounts and enforcing MFA are important steps, but they do not address the excessive permissions issue, which poses a more immediate risk. These measures can be part of a broader remediation strategy but are not the top priority. Option B: Revoking excessive permissions directly addresses the risk of privilege escalation and unauthorized access. Implementing RBAC ensures that users only have the permissions necessary for their roles, reducing the attack surface and improving overall security posture. These actions provide a proactive approach to addressing IAM issues effectively. Option C: Deleting all administrative roles indiscriminately can disrupt operations and is not a practical solution. Instead, roles should be reviewed and adjusted based on necessity and security requirements. Option D: Reassigning privileges might reduce some risks but does not address the root cause of excessive permissions or inactive accounts. A comprehensive RBAC policy is a more effective

No community discussion yet for this question.