nerdexam
(ISC)2

CCSP · Question #97

All of the following methods can be used to attenuate the harm caused by escalation of privilege except:

The correct answer is C. Periodic and effective use of cryptographic sanitization tools. Cryptographic sanitization tools are used for secure data erasure, not for mitigating harm from escalation of privilege attacks.

Submitted by saadiq_pk· Apr 18, 2026Cloud Security Operations

Question

All of the following methods can be used to attenuate the harm caused by escalation of privilege except:

Options

  • AExtensive access control and authentication tools and techniques
  • BAnalysis and review of all log data by trained, skilled personnel on a frequent basis
  • CPeriodic and effective use of cryptographic sanitization tools
  • DThe use of automated analysis tools such as SIM, SIEM, and SEM solutions

How the community answered

(25 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    72% (18)
  • D
    16% (4)

Why each option

Cryptographic sanitization tools are used for secure data erasure, not for mitigating harm from escalation of privilege attacks.

AExtensive access control and authentication tools and techniques

Extensive access control and authentication directly limit unauthorized privilege changes, thus attenuating harm from escalation.

BAnalysis and review of all log data by trained, skilled personnel on a frequent basis

Frequent analysis of log data helps detect anomalous activity that could indicate or lead to privilege escalation, enabling timely response.

CPeriodic and effective use of cryptographic sanitization toolsCorrect

Cryptographic sanitization tools are designed to securely erase data from storage media by encrypting it and then discarding or destroying the encryption keys, rendering the data unrecoverable. This process is unrelated to preventing or detecting privilege escalation.

DThe use of automated analysis tools such as SIM, SIEM, and SEM solutions

Automated analysis tools like SIEM/SEM solutions are crucial for real-time monitoring and alerting on security events, including potential privilege escalation attempts, thereby helping to mitigate harm.

Concept tested: Privilege escalation mitigation

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/implementing-least-privilege-administrative-models

Topics

#Escalation of Privilege#Mitigation#Security Controls#SIEM

Community Discussion

No community discussion yet for this question.

Full CCSP Practice