nerdexam
CompTIA

SY0-301 · Question #582

A new intern was assigned to the system engineering department, which consists of the system architect and system software developer's teams. These two teams have separate privileges. The intern requi

The correct answer is A. Group base privileges. Group-based privileges (Option A) allow the administrator to assign the intern to the appropriate groups (or a custom group with combined permissions), granting access to both sets of resources without manually configuring individual rights. This is efficient and scalable. Option

Security operations

Question

A new intern was assigned to the system engineering department, which consists of the system architect and system software developer's teams. These two teams have separate privileges. The intern requires privileges to view the system architectural drawings and comment on some software development projects. Which of the following methods should the system administrator implement?

Options

  • AGroup base privileges
  • BGeneric account prohibition
  • CUser access review
  • DCredential management

How the community answered

(46 responses)
  • A
    89% (41)
  • B
    2% (1)
  • C
    7% (3)
  • D
    2% (1)

Explanation

Group-based privileges (Option A) allow the administrator to assign the intern to the appropriate groups (or a custom group with combined permissions), granting access to both sets of resources without manually configuring individual rights. This is efficient and scalable. Option B (Generic account prohibition) refers to avoiding shared/generic accounts, which is a security best practice but not a solution here. Option C (User access review) is an audit process, not a provisioning method. Option D (Credential management) deals with storing and managing credentials securely, not assigning access rights. Group-based access is the standard method for granting a user permissions that span multiple teams.

Topics

#group-based access control#user provisioning#least privilege#access management

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice