Discuss GIAC GCCC Exam Topic 2 Question 86

An organization has implemented a control for Controlled Use of Administrative Privileges. They are collecting audit data for each login, logout, and location for the root account of their MySQL server, but they are unable to attribute each of these logins to a specific user. What action can they take to rectify this?

AForce the root account to only be accessible from the system console.

BTurn on SELinux and user process accounting for the MySQL server.

CForce user accounts to use 'sudo' f or privileged use.

DBlacklist client applications from being run in privileged mode.

Suggested Answer: C

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

22 comments · newest first

Marg 2 days ago

I agree, using 'sudo' helps track who did what.

Gladys 7 days ago

I think option C is the best choice. It adds accountability.

Garry 12 days ago

A is safer. Only console access reduces risk.

Tien 17 days ago

C makes sense. It’s about accountability for actions.

Muriel 22 days ago

I’m not sure about D. Blacklisting might cause issues.

Lawrence 28 days ago

Option B seems good too. SELinux adds extra security.

Martina 1 month ago

I agree, but A could also work. Limiting access is key.

Teri 1 month ago

I think option C is the best. Using 'sudo' helps track users.

Leoma 1 month ago

Why not just use individual accounts instead of root? Seems simpler!

Dominic 2 months ago

SELinux is great, but it won't solve the user attribution issue.

Adolph 2 months ago

Wait, can you really track logins with just sudo?

Cathrine 2 months ago

I think A could work too, but it's kinda limiting.

Berry 2 months ago

C is the best option, definitely.

Anika 2 months ago

D won't solve the attribution issue, just restricts apps.

Josephine 2 months ago

B could add complexity, not sure it's necessary.

Valentine 3 months ago

Surprised they didn't do this sooner!

Ashlyn 3 months ago

I disagree, A seems safer to limit access.

Angelica 3 months ago

C is the best option, using 'sudo' helps track users.

Christiane 3 months ago

Blacklisting client applications seems too restrictive and might not solve the attribution issue effectively.

Tequila 3 months ago

I'm uncertain about SELinux and user process accounting; it sounds familiar, but I can't recall how it directly relates to user attribution.

Justine 4 months ago

I think we practiced a question where using 'sudo' was emphasized for accountability. That might be the right choice here.

Torie 5 months ago

I remember discussing the importance of tracking user actions, but I'm not sure if limiting root access to the console is the best way to go.

GIAC GCCC Exam - Topic 2 Question 86 Discussion