SSCP · Question #1144
The ability to adjust access control to the exact amount of permission necessary is called ______________.
The correct answer is B. Granularity. The ability to precisely adjust access control permissions to the exact amount required is referred to as granularity.
Question
The ability to adjust access control to the exact amount of permission necessary is called ______________.
Options
- ADetection
- BGranularity
- CSeparation of Duties
- DConcept of Least Privilege
How the community answered
(40 responses)- A3% (1)
- B90% (36)
- C3% (1)
- D5% (2)
Why each option
The ability to precisely adjust access control permissions to the exact amount required is referred to as granularity.
Detection refers to the process of identifying security incidents or unauthorized activities, not the precision of access control settings.
Granularity in access control refers to the level of detail or precision at which permissions can be defined and assigned, allowing administrators to grant only the minimum necessary access for specific tasks or resources.
Separation of Duties is an organizational control that divides critical functions among different individuals to prevent fraud or error, not a term for adjusting permission levels.
The Concept of Least Privilege is a security principle advocating for granting only the minimum necessary permissions to users, which is a goal achieved through granular access control, not the term for the ability to adjust permissions.
Concept tested: Granularity of access control
Source: https://learn.microsoft.com/en-us/azure/architecture/guide/security/access-control-best-practices
Topics
Community Discussion
No community discussion yet for this question.