nerdexam
(ISC)2

SSCP · Question #143

This is a common security issue that is extremely hard to control in large environments. It occurs when a user has more computer rights, permissions, and access than what is required for the tasks…

The correct answer is D. Excessive Privileges. The scenario describes 'Excessive Privileges,' which is the standard security term for a user accumulating more rights, permissions, and access than their job role requires - a violation of the principle of least privilege. While the other terms (Excessive Rights, Excessive…

Submitted by katya_ua· Apr 18, 2026Access Controls

Question

This is a common security issue that is extremely hard to control in large environments. It occurs when a user has more computer rights, permissions, and access than what is required for the tasks the user needs to fulfill. What best describes this scenario?

Options

  • AExcessive Rights
  • BExcessive Access
  • CExcessive Permissions
  • DExcessive Privileges

How the community answered

(36 responses)
  • A
    3% (1)
  • B
    6% (2)
  • C
    3% (1)
  • D
    89% (32)

Explanation

The scenario describes 'Excessive Privileges,' which is the standard security term for a user accumulating more rights, permissions, and access than their job role requires - a violation of the principle of least privilege. While the other terms (Excessive Rights, Excessive Access, Excessive Permissions) may sound plausible, 'Excessive Privileges' is the accepted industry term that encompasses all of these dimensions. This issue is especially difficult to manage in large environments because access tends to accumulate over time as users change roles without having old access revoked (known as privilege creep).

Topics

#Least Privilege#Access Control#Privilege Management#Security Principles

Community Discussion

No community discussion yet for this question.

Full SSCP Practice