Multifactor Authentication and Least Privilege CSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company is designing a defense-in-depth strategy for cloud access. They want to ensure that even if a user's password is compromised, the attacker cannot access sensitive data, and that the user only has access to what is necessary for their role. Which combination of measures best achieves this?

   • AUse strong passwords and require periodic password changes
   • BGrant all users full access and rely on network security to protect data
   • CEnforce MFA for all users and grant each user only the permissions required for their job
   • DEnforce MFA for administrators only and grant all users broad read access
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An organization wants to reduce the risk of standing administrative privileges. They need to allow administrators to request elevated access only when needed and for a limited time. Which tool or approach should they implement?

   • AShared administrative accounts
   • BPermanent role assignments
   • CJust-in-time (JIT) access
   • DMFA only
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is just-in-time (JIT) access in the context of privilege management?

   • AGranting access based on the time of day
   • BGranting permanent elevated permissions to all users
   • CGranting elevated permissions only for a limited time when needed
   • DGranting access only during business hours
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is least privilege important in minimizing security risks?

   • AIt reduces the potential impact of a compromised account by limiting what an attacker can access
   • BIt simplifies password management by using a single password for all systems
   • CIt ensures that all users have administrative rights
   • DIt eliminates the need for monitoring user activity
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a best practice for deploying MFA effectively?

   • ARely solely on SMS-based MFA for all users
   • BUse the same MFA method for all users regardless of risk level
   • CImplement phishing-resistant MFA methods such as FIDO2 security keys
   • DDisable MFA for users who find it inconvenient
   Reveal Solution Discussion Select an answer first