Account Management GCCC Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   Your security team has limited resources and must choose which account monitoring controls to implement. The organization has many standard user accounts, a few privileged accounts, and several shared service accounts. Which approach provides the best risk reduction for the effort?

   • AFocus monitoring on standard user accounts because there are more of them.
   • BPrioritize monitoring of privileged and service accounts with behavioral analytics and alerting on anomalies.
   • CMonitor all accounts equally with the same level of logging and alerting.
   • DDisable logging for service accounts to reduce noise and focus on user accounts.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An employee is moving from the sales department to the finance department. The employee will need access to financial reporting systems but no longer needs access to the customer relationship management (CRM) system. What is the correct lifecycle action?

   • AAdd the finance role to the existing account and keep the sales role for a transition period.
   • BProvision the finance role, remove the sales role, and verify that the CRM access is revoked.
   • CChange the account's primary role to finance and leave the CRM access as is.
   • DDisable the current account and create a new account with only the finance role.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A hospital is onboarding a new radiologist. The IT team has a role-based access control (RBAC) model with predefined roles for 'Radiologist', 'Physician', and 'Nurse'. The radiologist will read imaging studies and consult on patient cases but should not have access to billing systems. What is the most appropriate provisioning approach?

   • AAssign the 'Nurse' role because it includes patient record access, and add imaging permissions manually.
   • BCreate a new custom role from scratch with only imaging access, ignoring existing roles to ensure minimal permissions.
   • CAssign the 'Physician' role because it is broader and includes all clinical systems, then remove billing access later if needed.
   • DAssign the 'Radiologist' role, which includes imaging and patient record access, and then explicitly deny access to billing systems.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A system administrator has a domain admin account that is used daily for routine tasks such as resetting user passwords and managing file shares. The security team wants to reduce the risk associated with this privileged account. What is the most effective control to implement?

   • ADisable the privileged account and use the standard user account for all administrative tasks.
   • BRequire the administrator to use a separate, non-privileged account for routine tasks and only use the privileged account for elevated actions.
   • CShare the privileged account credentials among the IT team to ensure coverage.
   • DKeep using the same account but change the password every 90 days.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is timely deprovisioning of accounts important for security?

   • AIt reduces the risk of unauthorized access through accounts that are no longer needed
   • BIt allows the organization to reuse usernames more quickly
   • CIt helps to reduce the number of help desk tickets for password resets
   • DIt ensures that all accounts have strong passwords
   Reveal Solution Discussion Select an answer first