5.5 - Manage the Identity and Access Provisioning Lifecycle CISSP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An organization conducts quarterly access reviews. During a recent review, the IAM team found that a service account used by a legacy application has been granted domain admin privileges. The application only needs to read a specific shared folder. What should the IAM team do?

   • ARemove the service account and create a new one with the minimum required permissions.
   • BAdd the service account to a group that has read access to the shared folder, keeping domain admin for now.
   • CChange the service account to have read-only access to the shared folder and document the change.
   • DLeave the service account as is because it is a legacy application and changing it might break functionality.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An organization has multiple service accounts used by applications to access databases. The security team is concerned about the risk of credential compromise. Which practice is most effective in reducing this risk?

   • ADisable password expiration for service accounts to avoid application downtime.
   • BGrant each service account the minimum permissions required for its application and rotate credentials regularly.
   • CUse the same strong password for all service accounts to simplify management.
   • DStore service account credentials in plain text in the application configuration files.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which action is most critical to perform promptly when an employee is terminated from the organization?

   • ATransferring the employee's email to another staff member without disabling the account
   • BChanging the employee's password and keeping the account active for a transition period
   • CNotifying the employee's manager to decide which permissions to keep
   • DRevoking all of the employee's access rights and disabling their accounts
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   During an access review, which type of account should be included in the scope of the review?

   • AUser, system, and service accounts that have access to organizational resources
   • BOnly user accounts that have administrative privileges
   • COnly accounts that are associated with external vendors or contractors
   • DOnly accounts that have been active in the last 90 days
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is an example of a privilege escalation method?

   • ALogging into a system with your own standard user account
   • BChanging your desktop wallpaper to a company logo
   • CSending an email to a colleague with an attachment
   • DUsing the sudo command to execute a task with elevated privileges
   Reveal Solution Discussion Select an answer first