Define Data Access Provisioning CSSLP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which security consideration is especially important when managing service accounts?

   • ADisabling password expiration to avoid service interruptions
   • BRegularly rotating the account's credentials and limiting its permissions to the minimum required
   • CEnsuring the account is used by multiple applications to reduce administrative overhead
   • DAssigning the account administrative privileges to simplify troubleshooting
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A software company runs a nightly batch job that generates financial reports. The job runs under a service account that has been granted broad access to the finance database. During a security review, the team discovers that the service account's password has not been changed in over two years and is known to several former employees. What is the most appropriate immediate action to mitigate the risk?

   • ALeave the service account unchanged but add a policy that requires password rotation every 90 days going forward.
   • BChange the service account password immediately and update the batch job's configuration to use the new credential.
   • CDelete the service account and create a new one with identical permissions for the batch job.
   • DDisable the service account and require a human operator to run the batch job manually each night.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company is implementing a new CRM system and wants to ensure that user access is provisioned based on the principle of least privilege. Which approach best supports this requirement?

   • ADefine roles that represent the minimum permissions required for each job function and assign users to those roles.
   • BGrant users access based on their requests, without reviewing whether the access is necessary for their job function.
   • CCopy the access rights of the most senior user in each department to all new users in that department.
   • DGrant all users the same level of access to simplify administration.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the primary purpose of user provisioning in an organization?

   • ATo encrypt sensitive data both at rest and in transit to protect confidentiality
   • BTo automate the deployment of software patches and updates to user workstations
   • CTo grant and manage access rights for individuals based on their roles and responsibilities
   • DTo monitor network traffic for suspicious activity and potential security breaches
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which activity is a typical part of the user provisioning process?

   • ACreating a user account when a new employee joins the organization
   • BConfiguring firewall rules to block unauthorized external access
   • CPerforming a vulnerability scan on the organization's servers
   • DDeveloping a new software application to meet business requirements
   Reveal Solution Discussion Select an answer first