Learn About the Processes and Controls Involved in Identity Management, Authentication, and Access Control. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A system administrator needs to perform a one-time emergency configuration change on a critical server. The change requires elevated privileges. What is the most secure way to grant these privileges?

   • ADisable the account and use a generic admin account
   • BAdd the administrator's account to the local Administrators group permanently
   • CUse a privileged access management solution to grant temporary elevated access for the duration of the task
   • DShare the root password with the administrator
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which practice is commonly associated with privileged access management?

   • AGranting permanent, standing access to all privileged accounts.
   • BDisabling all logging for privileged sessions to protect privacy.
   • CAllowing all users to share a single administrator account for convenience.
   • DStoring privileged account passwords in a secure vault and rotating them regularly.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is an example of a digital identity that identity management would establish?

   • AA firewall rule that allows traffic from a specific IP address.
   • BA backup tape stored in a secure offsite facility.
   • CA security camera recording of the building entrance.
   • DA user account in the company's Active Directory with a unique username and associated attributes.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company has several IT administrators who require elevated access to manage servers. To reduce the risk of credential theft, what should the company implement?

   • AImplement a privileged access management solution with just-in-time access
   • BDisable multi-factor authentication for admin accounts
   • CShare the same admin password among all administrators
   • DUse a password manager to store admin passwords in plain text
   Reveal Solution Discussion Select an answer first
6. 15application · easy

   A company wants to strengthen authentication for remote employees accessing the corporate network. They currently use only passwords. Which additional control would provide the strongest improvement?

   • ARequire longer passwords
   • BRequire password changes every 30 days
   • CUse the same password for all systems
   • DRequire a one-time passcode generated by an authenticator app
   Reveal Solution Discussion Select an answer first