A financial firm must ensure that only employees in the 'Loan Officer' role can approve loan applications, and that this permission is automatically revoked when an employee is transferred to a different role. Which authorization model best meets this requirement?

Role-based access control (RBAC), because permissions are tied to roles and changes to a user's role automatically update their permissions.

Discretionary access control (DAC), because the resource owner can grant and revoke access on a per-user basis.

Attribute-based access control (ABAC), because it evaluates attributes such as department and job title at each access request.

Mandatory access control (MAC), because it enforces access based on security labels and clearances.

A large organization has a team of database administrators (DBAs) who need full administrative access to production databases, but the security team is concerned about the risk of a compromised DBA account. The organization also has a compliance requirement that all privileged actions be attributable to a specific individual. The DBAs currently share a single 'sa' account. Which solution best addresses the security and compliance requirements while minimizing disruption to the DBAs' workflow?

Give each DBA a permanent, unique administrative account and require them to use it for all database work.

Implement a privileged access management (PAM) solution that provides each DBA with a unique, temporary administrative credential that is automatically rotated after each use, with session recording and audit logs.

Use a jump server with a shared admin account and require DBAs to log in to the jump server with their personal credentials, then use the shared account.

Create a single 'admin' account with a very strong password and distribute it only to the DBAs, with a policy that they must not share it further.

Your organization uses a privileged access management (PAM) solution. An administrator needs to perform a one-time high-risk database change. What is the recommended practice?

Share the privileged password via a secure chat channel

Request a permanent role change to database admin

Check out the privileged account from the PAM vault, perform the change, then check it back in

Use the administrator's personal account with elevated privileges

GIAC Information Security Professional

Domain 3Objective 1

Identity and Access Management (IAM) GISP Practice Questions (Page 6)

Part of the Access, Testing, and Development domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 10–17 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 26–30

26application · medium
A financial firm must ensure that only employees in the 'Loan Officer' role can approve loan applications, and that this permission is automatically revoked when an employee is transferred to a different role. Which authorization model best meets this requirement?
Select an answer first
27foundation · easy
Which process involves creating user accounts and granting initial access rights when a new employee joins an organization?
Select an answer first
28expert · hard
A large organization has a team of database administrators (DBAs) who need full administrative access to production databases, but the security team is concerned about the risk of a compromised DBA account. The organization also has a compliance requirement that all privileged actions be attributable to a specific individual. The DBAs currently share a single 'sa' account. Which solution best addresses the security and compliance requirements while minimizing disruption to the DBAs' workflow?
Select an answer first
29application · medium
Your organization uses a privileged access management (PAM) solution. An administrator needs to perform a one-time high-risk database change. What is the recommended practice?
Select an answer first
30foundation · easy
In a database system, which mechanism is used to control which users can perform specific operations (e.g., SELECT, INSERT, UPDATE) on tables?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Identity and Access Management (IAM) GISP Practice Questions (Page 6)

Questions 26–30

A financial firm must ensure that only employees in the 'Loan Officer' role can approve loan applications, and that this permission is automatically revoked when an employee is transferred to a different role. Which authorization model best meets this requirement?

Which process involves creating user accounts and granting initial access rights when a new employee joins an organization?

Your organization uses a privileged access management (PAM) solution. An administrator needs to perform a one-time high-risk database change. What is the recommended practice?

In a database system, which mechanism is used to control which users can perform specific operations (e.g., SELECT, INSERT, UPDATE) on tables?

Keep studying — Access, Testing, and Development