7.4 - Apply Foundational Security Operations Concepts CISSP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security administrator is reviewing the use of a privileged account that is shared among five IT staff members. The administrator wants to improve accountability and reduce the risk of misuse. Which action should be taken?

   • AReplace the shared account with individual privileged accounts for each staff member.
   • BKeep the shared account but change the password monthly.
   • CKeep the shared account but require staff to log their usage in a shared spreadsheet.
   • DDisable the shared account and use the built-in administrator account on each server.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company's IT team manages a legacy application that requires a single shared administrator account because the application does not support individual accounts. The security team wants to improve accountability and reduce the risk of misuse. The company also has an SLA with internal business units that requires 99.9% availability for the application. Which approach best addresses the security concern without violating the SLA?

   • AChange the shared account password daily and distribute it to the IT team via email.
   • BImplement a privileged access management (PAM) solution that checks out the shared account, records the session, and associates the session with the individual user.
   • CDisable the shared account and require users to access the application through a VPN with their personal credentials.
   • DSchedule the application for maintenance every night to reduce the risk of misuse.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which principle states that users should be granted only the minimum access necessary to perform their job duties?

   • AJob rotation
   • BDefense in depth
   • CSeparation of duties
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a security operations context, what does the 'need-to-know' principle specifically restrict?

   • AAccess to information only when it is required for the performance of a specific job duty
   • BAccess to information based on the user's clearance level
   • CAccess to information to only those with a security clearance
   • DAccess to systems only during business hours
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A database administrator (DBA) has full access to the production database, including the ability to modify data. The security team wants to reduce the risk of unauthorized changes while still allowing the DBA to perform necessary maintenance. Which approach best balances access and control?

   • AGrant full access to the DBA and also to the security team for oversight.
   • BGrant full access only during business hours and revoke it after hours.
   • CKeep full access but require the DBA to log all changes in a spreadsheet.
   • DGrant the DBA read-only access to the production database and require a separate change-management process for any modifications.
   Reveal Solution Discussion Select an answer first