CWNP Exam CWISA-102 Topic 2 Question 5 Discussion

Actual exam question for CWNP's CWISA-102 exam

Question #: 5
Topic #: 2

You must ensure proper security controls are in place for a wireless solution. The solution allows for the use of groups to grant access to resources and capabilities. What is the term used to describe a situation where an individual is granted more access than required because of inclusion in a group?

AImproper delegation

BPrivilege escalation

CPrivilege creep

DImproper grouping

Show Suggested Answer

Suggested Answer: C

Privilege Creep Defined:Gradual accumulation of excessive permissions over time, often due to users changing roles or access needs not being adjusted accordingly.

Other Terms:

Privilege Escalation: A malicious act of obtaining higher-than-authorized access.

Improper Delegation/Grouping: Faulty permission assignment, but not the gradual accretion aspect.

References:

Principle of Least Privilege:Security best practice emphasizing the need to minimize access to only what's necessary.

Access Control Models:Discussions of how privilege creep can violate security principles.

by Tijuana at Apr 22, 2024, 09:59 PM

Limited Time Offer

25%

6 days ago

The term used to describe that situation is privilege creep.

upvoted 0 times

...