Account Management GCCC Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A company is implementing a new policy to reduce the risk of account compromise due to weak passwords. The policy must balance security with user productivity. Which authentication control is most effective?

   • ARequire multi-factor authentication (MFA) for all user accounts.
   • BDisable account lockout to avoid user frustration.
   • CRequire users to change their passwords every 30 days.
   • DImplement a password complexity policy that requires at least 12 characters with special characters.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   During account provisioning, what principle should guide the initial access rights granted to a new user?

   • AGrant access to all systems to ensure the user can work without delays
   • BGrant the same access as the most senior person in the department
   • CGrant the minimum access required to perform the user's job role
   • DGrant all permissions that might be needed in the future to avoid repeated changes
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is a primary risk associated with shared accounts?

   • AInability to attribute actions to a specific individual
   • BThey are more likely to have weak passwords
   • CThey cannot be used for automated processes
   • DThey are not subject to password policies
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   Your organization has a small IT team. The only database administrator (DBA) is going on leave for two weeks. The team needs to perform routine database maintenance while the DBA is away. What is the best approach to maintain security and operational continuity?

   • AGrant a temporary privileged role to a trusted senior engineer for the duration of the leave, with monitoring and a defined end date.
   • BShare the DBA's password with the senior engineer so they can log in as the DBA.
   • CCreate a new permanent DBA account for the senior engineer to use even after the DBA returns.
   • DDisable the DBA account and have the senior engineer use their own account with no extra privileges.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A company has a shared service account used by a legacy application to connect to a database. The password is stored in a plain text file on a shared drive. The security team wants to improve the security of this account. What is the most appropriate action?

   • AKeep the password in the plain text file but change it every month.
   • BShare the password with all IT staff so they can troubleshoot the application.
   • CStore the password in a secure credential vault and restrict access to the vault to only the application administrators.
   • DDisable the service account and use a human user account for the application.
   Reveal Solution Discussion Select an answer first