Administrative Access GDAT Practice Questions (Page 8)

Questions 36–40

1. 36foundation · easy

   What is the primary purpose of auditing administrative activity?

   • ATo reduce the number of administrators needed.
   • BTo automatically block all administrative actions.
   • CTo detect and investigate unauthorized or suspicious actions.
   • DTo eliminate the need for multi-factor authentication.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A network administrator needs to perform a one-time configuration change on a firewall. The administrator's normal account does not have firewall admin rights. The change must be completed within 30 minutes. What is the best approach?

   • AAdd the administrator to the firewall admin group permanently for convenience.
   • BShare the firewall admin password with the administrator for the task.
   • CHave the administrator use a break-glass account and change the password afterward.
   • DProvide the administrator with a temporary elevated role that expires after 30 minutes and logs all actions.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Why is separation of duties important for administrative access?

   • AIt prevents any single administrator from having unchecked control over critical systems.
   • BIt reduces the number of passwords administrators need to remember.
   • CIt ensures that all administrators have the same level of access.
   • DIt allows administrators to share the same account for easier collaboration.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company is migrating from on-premises to the cloud. The security team needs to manage administrative access to cloud resources while maintaining least privilege and auditability. Which approach is most effective?

   • AReplicate the on-premises AD structure in the cloud and grant the same privileges.
   • BUse a single cloud admin account for all administrative tasks to simplify management.
   • CUse cloud-native identity and access management with role-based access control and conditional access policies, and enable auditing.
   • DDisable cloud administrative access and rely on on-premises admins to manage cloud resources through a VPN.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   An organization is implementing MFA for all administrative accounts. The CISO wants to ensure that MFA cannot be bypassed by an attacker who has stolen a password. Which configuration is most important?

   • ARequire MFA for all interactive logons and sensitive actions, and disable legacy authentication protocols.
   • BUse SMS as the primary MFA method because it is easy for users.
   • CImplement MFA only for remote access, not for on-premises administrative consoles.
   • DAllow users to register multiple MFA devices and choose any at logon.
   Reveal Solution Discussion Select an answer first