Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCCC Exam - Topic 5 Question 51 Discussion

Posted by Tijuana on Jul 02, 2024 at 07:10 PM

Which of the following is a requirement in order to implement the principle of least privilege?

Suggested Answer: D

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
37 comments · newest first
CA
Callie 10 months ago
Really? I thought data normalization was key too.
NA
Nada 11 months ago
Totally agree with C! Makes sense.
ME
Meaghan 11 months ago
Wait, isn't DAC also important for this?
JA
Jade 11 months ago
I think A is more relevant here.
CL
Clarence 11 months ago
C is definitely a requirement for least privilege.
DE
Delisa 11 months ago
I’m a bit confused; I thought MAC was more about enforcing policies rather than just implementing least privilege.
LO
Lourdes 12 months ago
I feel like I’ve seen practice questions where DAC was mentioned in the context of least privilege, but I can't recall the specifics.
AN
Anissa 12 months ago
I remember studying about data classification in relation to access controls, so I might lean towards option C.
JU
Justine 12 months ago
I think the principle of least privilege is about limiting access, but I'm not sure if MAC is the right answer.
JA
Jannette 12 months ago
I've got a good feeling about Discretionary Access Control being the answer here. That's all about users managing their own permissions, which aligns with the principle of least privilege. I'm going to go with D on this one.
CA
Carissa 12 months ago
I'm a bit confused by the options here. Mandatory Access Control and data normalization/classification don't seem directly related to the principle of least privilege. I'll have to review my notes on access control models to figure out the right answer.
TA
Tayna 12 months ago
Hmm, I'm a little unsure about this one. I know the principle of least privilege is important, but I'm not totally clear on how the different access control models relate to it. I'll have to think this through carefully.
AM
Ammie 1 year ago
This one seems pretty straightforward. I'm pretty sure the answer is Discretionary Access Control (DAC), since that's all about limiting user privileges to the minimum required.
AL
Allene 1 year ago
Okay, let's see. The principle of least privilege means only granting users the minimum permissions they need to do their job. So it makes sense that Discretionary Access Control, where users can control their own permissions, would be a key requirement for that. I'm feeling good about picking D for this one.
AZ
Azzie 1 year ago
This looks tricky, but I think I can figure it out if I take my time and focus on the key details.
BR
Brigette 1 year ago
Value Engineering is all about optimizing the value of a product or service, so I'm guessing one of these other options is the alternative term. I'll have to eliminate the ones that don't seem quite right.
NO
Nobuko 1 year ago
I hear the principle of least privilege also requires you to wear a funny hat while coding. Or was that just for the IT support staff?
RO
Royce 1 year ago
Data classification? What does that have to do with least privilege? I'm going with the good old DAC for this one.
AH
Ahmed 1 year ago
↳ replying to Royce
Really? I thought MAC was more about controlling access based on labels rather than user discretion.
YO
Yong 1 year ago
↳ replying to Royce
I see your point, but MAC is actually the best choice for implementing the principle of least privilege.
SY
Sylvie 1 year ago
↳ replying to Royce
But data classification is important too, it helps determine the sensitivity of data and who should have access to it.
MA
Margart 1 year ago
↳ replying to Royce
DAC is a good choice, it allows users to control access to their own resources.
KA
Kanisha 1 year ago
Hmm, Mandatory Access Control (MAC) could also work, but I think Discretionary Access Control (DAC) is the more specific requirement here.
MA
Matthew 1 year ago
↳ replying to Kanisha
I believe both Mandatory Access Control (MAC) and Discretionary Access Control (DAC) are necessary to properly implement the principle of least privilege.
GE
German 1 year ago
↳ replying to Kanisha
I think Data classification is also important for determining the level of access that should be granted to users.
DE
Destiny 1 year ago
↳ replying to Kanisha
I agree, Discretionary Access Control (DAC) is more specific and essential for implementing the principle of least privilege.
AM
Amira 1 year ago
Data normalization? Come on, that's got nothing to do with access control! I'm going with DAC for this one.
AD
Adela 1 year ago
↳ replying to Amira
Exactly, DAC is the key for least privilege.
DO
Dorsey 1 year ago
↳ replying to Amira
Data normalization is not related to access control.
AM
Amber 1 year ago
↳ replying to Amira
I agree, DAC is definitely a requirement for implementing least privilege.
RE
Rebecka 1 year ago
↳ replying to Amira
DAC is the way to go for least privilege.
JA
Janna 1 year ago
I'm pretty sure the principle of least privilege requires Discretionary Access Control (DAC). That sounds like the right answer to me.
FR
Franchesca 1 year ago
↳ replying to Janna
No, I'm pretty sure it's Discretionary Access Control (DAC) that is needed for least privilege.
SA
Sang 1 year ago
↳ replying to Janna
I think it's actually Mandatory Access Control (MAC) that is required for the principle of least privilege.
BE
Bernadine 1 year ago
I think the answer is C) Data classification because it helps in determining the sensitivity of data
KI
Kimberely 2 years ago
I disagree, I believe the answer is D) Discretionary Access Control (DAC)
ED
Edelmira 2 years ago
I think the answer is A) Mandatory Access Control (MAC)
0/2000 characters

Save Cancel