SY0-301 · Question #362
Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?
The correct answer is A. User rights reviews. The principle of least privilege states that users should only have the minimum access rights necessary to perform their job functions. User rights reviews (also called access reviews or entitlement reviews) allow a security analyst to audit existing user permissions, identify…
Question
Which of the following risk mitigation strategies will allow Ann, a security analyst, to enforce least privilege principles?
Options
- AUser rights reviews
- BIncident management
- CRisk based controls
- DAnnual loss expectancy
How the community answered
(18 responses)- A94% (17)
- C6% (1)
Explanation
The principle of least privilege states that users should only have the minimum access rights necessary to perform their job functions. User rights reviews (also called access reviews or entitlement reviews) allow a security analyst to audit existing user permissions, identify over-provisioned accounts, and revoke unnecessary access - directly enforcing least privilege. Incident management deals with responding to security events. Risk-based controls is a broad framework for applying controls proportional to risk. Annual loss expectancy (ALE) is a financial metric used in quantitative risk analysis, not an access control enforcement mechanism.
Topics
Community Discussion
No community discussion yet for this question.