nerdexam
GIAC

GSEC · Question #148

Where are user accounts and passwords stored in a decentralized privilege management environment?

The correct answer is C. On each server. In a decentralized privilege management environment, each server independently stores and manages its own local user account and password database with no shared authentication service.

Access Control and Password Management

Question

Where are user accounts and passwords stored in a decentralized privilege management environment?

Options

  • AOn a central authentication server.
  • BOn more than one server.
  • COn each server.
  • DOn a server configured for decentralized privilege management.

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    83% (20)
  • D
    4% (1)

Why each option

In a decentralized privilege management environment, each server independently stores and manages its own local user account and password database with no shared authentication service.

AOn a central authentication server.

A central authentication server is the defining component of centralized privilege management - systems like LDAP, Active Directory, or RADIUS authenticate users from a single shared repository, which is the opposite of the decentralized model.

BOn more than one server.

Storing credentials on more than one server could describe replication within a centralized federated system and does not specifically define the decentralized model where each server manages its own independent local accounts.

COn each server.Correct

Decentralized privilege management means every server maintains its own local credential store - user accounts and passwords exist as local entries on each individual machine. Authentication decisions are made locally by each server, with no dependency on a shared directory or authentication service, which is the core distinction from centralized models.

DOn a server configured for decentralized privilege management.

This choice is circular and tautological - it restates the phrase 'decentralized privilege management' without identifying where credentials are actually stored, providing no meaningful technical distinction.

Concept tested: Decentralized vs. centralized privilege management credential storage

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#decentralized authentication#privilege management#local account storage#password management

Community Discussion

No community discussion yet for this question.

Full GSEC Practice