Account Management GCCC Practice Questions (Page 9)

Questions 41–45

1. 41application · medium

   A new project manager joins a software development team. The project manager needs access to the project tracking tool, the code repository (read-only), and the shared drive for the project. According to least privilege, what access should be granted?

   • AFull access to the project tracking tool, read-only access to the code repository, and read-write access to the shared drive.
   • BNo access to the code repository because project managers should not see code.
   • CRead-only access to the project tracking tool, full access to the code repository, and read-only access to the shared drive.
   • DFull access to all three systems to allow flexibility.
   Reveal Solution Discussion Select an answer first
2. 42application · medium

   An employee is terminated effective immediately. The HR system automatically sends a termination notification to IT. What is the most appropriate deprovisioning procedure?

   • ADelete all accounts immediately to ensure no residual access remains.
   • BDisable only the email account and leave other system access active for a week.
   • CChange the passwords and keep the accounts enabled for the employee's replacement.
   • DDisable all accounts immediately, revoke access tokens, and then remove the accounts after a holding period.
   Reveal Solution Discussion Select an answer first
4. 43expert · hard

   A mid-sized company has a single IT administrator who manages all systems. The company is growing and needs to implement separation of duties for privileged access. However, hiring additional staff is not feasible in the short term. What is the most practical control to reduce risk?

   • ARequire the administrator to use a shared account for all privileged tasks to simplify auditing.
   • BGrant the administrator full access but require them to self-report any changes they make.
   • CDisable the administrator's privileged access and use standard user accounts for all tasks.
   • DImplement a privileged access management (PAM) solution that requires approval for privileged commands and records sessions.
   Reveal Solution Discussion Select an answer first
5. 44application · medium

   A financial services firm conducts quarterly access reviews. During the latest review, the IT team discovers that a former intern's account is still active and has access to the expense reporting system. The intern left the company six months ago. What should the IT team do first?

   • ASend an email to the intern to confirm whether they still need access.
   • BLeave the account active until the next quarterly review to avoid disrupting any pending work.
   • CDisable the account immediately and then investigate why it was not deprovisioned earlier.
   • DChange the password and keep the account active for auditing purposes.
   Reveal Solution Discussion Select an answer first
6. 45foundation · easy

   What is the purpose of multi-factor authentication (MFA)?

   • ATo allow users to reset their passwords without contacting IT
   • BTo require users to provide two or more verification factors to prove their identity
   • CTo ensure that users change their passwords regularly
   • DTo grant users access to multiple systems with a single login
   Reveal Solution Discussion Select an answer first