Why is it important to audit privilege escalation actions such as sudo usage?

To ensure that all users have the same level of access

To prevent users from ever using sudo

To detect unauthorized or excessive use of elevated privileges

During an access review, the IAM team discovers that a service account has been granted access to a sensitive database that the associated application no longer uses. What should the team do?

Keep the access in case the application needs it in the future.

Add the service account to a group that has access to the database for easier management.

Change the service account password to prevent unauthorized use.

Remove the service account's access to the database and document the change.

An employee is terminated effective immediately. The security team has been notified. What is the most important action to take to prevent unauthorized access?

Wait until the end of the business day to disable the account to allow a smooth transition.

Change the employee's password and keep the account active for monitoring.

Send an email to all employees announcing the termination and ask them to ignore any requests from the former employee.

Disable the employee's network account and all associated access within the hour.

A Linux administrator uses sudo to perform administrative tasks. The security team wants to ensure that sudo usage is monitored and that any excessive privilege use is detected. Which control should be implemented?

Configure sudo to log all commands to a central log server and review the logs regularly.

Grant all users full sudo access to simplify administration and reduce help desk tickets.

Use a shared sudo account for all administrators to simplify credential management.

Disable sudo for all users and require the root password for administrative tasks.

Which of the following is a best practice for managing service account credentials?

Using a unique, strong password for each service account

Storing service account passwords in plain text in configuration files

Setting passwords that never expire to avoid service disruptions

Sharing the same password across multiple service accounts for convenience

Certified Information Systems Security Professional

Domain 5Objective 5

5.5 - Manage the Identity and Access Provisioning Lifecycle CISSP Practice Questions (Page 2)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

5concepts

13%of the exam

Questions 6–10

6foundation · easy
Why is it important to audit privilege escalation actions such as sudo usage?
Select an answer first
7application · medium
During an access review, the IAM team discovers that a service account has been granted access to a sensitive database that the associated application no longer uses. What should the team do?
Select an answer first
8application · medium
An employee is terminated effective immediately. The security team has been notified. What is the most important action to take to prevent unauthorized access?
Select an answer first
9application · medium
A Linux administrator uses sudo to perform administrative tasks. The security team wants to ensure that sudo usage is monitored and that any excessive privilege use is detected. Which control should be implemented?
Select an answer first
10foundation · easy
Which of the following is a best practice for managing service account credentials?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.