CertNexus CFR-410 Exam - Topic 1 Question 68 Discussion

Actual exam question for CertNexus's CFR-410 exam

Question #: 68
Topic #: 1

A system administrator pulls records from a database that only requires the use of their general user vs. domain admin account. Use of the general user account demonstrates which of the following concepts?

ADiscretionary Access Control

BSeparation of Duties

CLeast Privilege

DPrivileged Access Management

Show Suggested Answer

Suggested Answer: C

The principle of Least Privilege ensures that users are granted the minimum level of access required to perform their tasks. In this case, using the general user account instead of a domain admin account demonstrates least privilege, as the administrator is only granted the necessary permissions to access the required records, rather than full administrative rights.

by Malinda at Mar 02, 2026, 01:43 PM

Limited Time Offer

25%

Off

Get Premium CFR-410 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kirk

1 month ago

I’m not sure, but B) Separation of Duties sounds interesting too.

upvoted 0 times

...

Danilo

1 month ago

Definitely C. Keeps the system secure by minimizing risks.

upvoted 0 times

...

Katina

1 month ago

Agreed! It shows they only use what they need.

upvoted 0 times

...

Lonna

2 months ago

I think it's C) Least Privilege. Using a general account limits access.

upvoted 0 times

...

Twana

2 months ago

Definitely C! Keeps the system secure and reduces risks.

upvoted 0 times

...

Devon

2 months ago

B) Separation of Duties could fit too, but I lean towards C.

upvoted 0 times

...

Leslie

2 months ago

Agreed! It limits access to sensitive data.

upvoted 0 times

...

Lashunda

2 months ago

I think it's C) Least Privilege. Only using what's necessary.

upvoted 0 times

...

Merlyn

2 months ago

Definitely C. Keeps the system secure and reduces risks.

upvoted 0 times

...

Carin

3 months ago

B) Separation of Duties could fit too, but I lean towards C.

upvoted 0 times

...

Valentin

3 months ago

Agreed! It limits access to sensitive data.

upvoted 0 times

...

Dorsey

3 months ago

I think it's C) Least Privilege. Only using what you need.

upvoted 0 times

...

Paola

3 months ago

Hmm, I didn't know that! Makes sense though.

upvoted 0 times

...

Meaghan

3 months ago

I thought it was A) Discretionary Access Control at first.

upvoted 0 times

...

Vallie

5 months ago

Wait, are we sure it's not B) Separation of Duties?

upvoted 0 times

...

Herman

5 months ago

Totally agree, using a general user account is smart!

upvoted 0 times

...

Lera

5 months ago

That's definitely C) Least Privilege.

upvoted 0 times

...

Jospeh

5 months ago

Hmm, I have my doubts about that. Could be more than one concept at play.

upvoted 0 times

...

Catalina

6 months ago

I think it's clear, C) Least Privilege is the way to go.

upvoted 0 times

...

Arleen

6 months ago

Wait, are we sure it's not B) Separation of Duties?

upvoted 0 times

...

Doyle

6 months ago

Totally agree, using a general user account is smart!

upvoted 0 times

...

Mila

6 months ago

That's definitely C) Least Privilege.

upvoted 0 times

...

Josphine

6 months ago

I could see it being discretionary access control too, but I lean towards least privilege since the admin is using a general account.

upvoted 0 times

...

Janey

6 months ago

This reminds me of a practice question we did on access control models. I feel like least privilege fits best here.

upvoted 0 times

...

Lelia

7 months ago

I'm not entirely sure, but I remember something about separation of duties being important in preventing misuse.

upvoted 0 times

...

Nenita

7 months ago

I think this is related to the principle of least privilege, where you only use the access you need.

upvoted 0 times

...