CCSP · Question #97
All of the following methods can be used to attenuate the harm caused by escalation of privilege except:
The correct answer is C. Periodic and effective use of cryptographic sanitization tools. Cryptographic sanitization tools are used for secure data erasure, not for mitigating harm from escalation of privilege attacks.
Question
All of the following methods can be used to attenuate the harm caused by escalation of privilege except:
Options
- AExtensive access control and authentication tools and techniques
- BAnalysis and review of all log data by trained, skilled personnel on a frequent basis
- CPeriodic and effective use of cryptographic sanitization tools
- DThe use of automated analysis tools such as SIM, SIEM, and SEM solutions
How the community answered
(25 responses)- A4% (1)
- B8% (2)
- C72% (18)
- D16% (4)
Why each option
Cryptographic sanitization tools are used for secure data erasure, not for mitigating harm from escalation of privilege attacks.
Extensive access control and authentication directly limit unauthorized privilege changes, thus attenuating harm from escalation.
Frequent analysis of log data helps detect anomalous activity that could indicate or lead to privilege escalation, enabling timely response.
Cryptographic sanitization tools are designed to securely erase data from storage media by encrypting it and then discarding or destroying the encryption keys, rendering the data unrecoverable. This process is unrelated to preventing or detecting privilege escalation.
Automated analysis tools like SIEM/SEM solutions are crucial for real-time monitoring and alerting on security events, including potential privilege escalation attempts, thereby helping to mitigate harm.
Concept tested: Privilege escalation mitigation
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models
Topics
Community Discussion
No community discussion yet for this question.