nerdexam
Isaca

CISM · Question #401

A financial company is using mission critical software. Due to technical limitations, several individuals share one administrator account. In this situation it is MOST important for the information…

The correct answer is D. implement privileged account management controls. The most important action in this scenario is to implement privileged account management controls. Sharing a single administrator account creates significant security risks, such as difficulty in tracking individual actions and accountability. Privileged account management…

Submitted by zhang_li· Apr 18, 2026Information Security Program Development and Management

Question

A financial company is using mission critical software. Due to technical limitations, several individuals share one administrator account. In this situation it is MOST important for the information security manager to:

Options

  • Areduce the privileges of the administrator account.
  • Binstall an intrusion prevention system (IPS).
  • Creview system logs to track shared account usage.
  • Dimplement privileged account management controls.

How the community answered

(62 responses)
  • A
    5% (3)
  • B
    10% (6)
  • C
    2% (1)
  • D
    84% (52)

Explanation

The most important action in this scenario is to implement privileged account management controls. Sharing a single administrator account creates significant security risks, such as difficulty in tracking individual actions and accountability. Privileged account management (PAM) helps enforce segregation of duties, monitor and control access, and ensure proper logging and auditing of actions taken by administrators, thereby reducing the risk of abuse and enhancing

Topics

#Privileged Access Management#Access Control#Accountability#Information Security Program Management

Community Discussion

No community discussion yet for this question.

Full CISM Practice