5.5 - Manage the Identity and Access Provisioning Lifecycle CISSP Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security analyst notices that a user with standard privileges has been using sudo to run administrative commands. The analyst wants to determine if this is authorized. What should the analyst do first?

   • AChange the user's password to prevent further sudo usage.
   • BCheck the sudo logs to see which commands the user executed and compare them with the user's job responsibilities.
   • CDisable the user's account to prevent any further actions.
   • DImmediately revoke the user's sudo access.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company is defining roles for its new HR system. The HR manager needs to view employee records, but only the payroll specialist should be able to modify salary information. Which approach ensures separation of duties?

   • AGive the HR manager full access and the payroll specialist read-only access to salary data.
   • BCreate a single HR role that includes both view and modify permissions for all employee data.
   • CAssign all HR staff the same role and rely on training to prevent unauthorized modifications.
   • DCreate separate roles for HR manager and payroll specialist, with the payroll specialist role including modify salary permissions.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the primary purpose of conducting a periodic account access review?

   • ATo ensure that all user passwords are changed at least once per quarter
   • BTo assign new permissions to users who have recently joined the organization
   • CTo verify that each account's access rights still match the individual's current job responsibilities and comply with security policies
   • DTo identify which users have logged in during the review period
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When an employee is assigned a new role, what should happen to their previous role's access rights?

   • AThey should be transferred to another employee automatically
   • BThey should be retained to avoid disrupting the employee's work
   • CThey should be removed unless they are also required by the new role
   • DThey should be kept for a probationary period of 30 days
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Why is it important to regularly review and monitor service accounts?

   • ATo ensure they still have only the permissions necessary for their function and to detect misuse
   • BTo confirm that service accounts are never used by human users
   • CTo verify that service accounts are used only during business hours
   • DTo ensure that service account passwords are changed every day
   Reveal Solution Discussion Select an answer first