GSEC · Question #148
Where are user accounts and passwords stored in a decentralized privilege management environment?
The correct answer is C. On each server. In a decentralized privilege management environment, each server independently stores and manages its own local user account and password database with no shared authentication service.
Question
Where are user accounts and passwords stored in a decentralized privilege management environment?
Options
- AOn a central authentication server.
- BOn more than one server.
- COn each server.
- DOn a server configured for decentralized privilege management.
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C83% (20)
- D4% (1)
Why each option
In a decentralized privilege management environment, each server independently stores and manages its own local user account and password database with no shared authentication service.
A central authentication server is the defining component of centralized privilege management - systems like LDAP, Active Directory, or RADIUS authenticate users from a single shared repository, which is the opposite of the decentralized model.
Storing credentials on more than one server could describe replication within a centralized federated system and does not specifically define the decentralized model where each server manages its own independent local accounts.
Decentralized privilege management means every server maintains its own local credential store - user accounts and passwords exist as local entries on each individual machine. Authentication decisions are made locally by each server, with no dependency on a shared directory or authentication service, which is the core distinction from centralized models.
This choice is circular and tautological - it restates the phrase 'decentralized privilege management' without identifying where credentials are actually stored, providing no meaningful technical distinction.
Concept tested: Decentralized vs. centralized privilege management credential storage
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.