GIAC Exam GCCC Topic 5 Question 51 Discussion

Actual exam question for GIAC's GCCC exam

Question #: 51
Topic #: 5

[All GCCC Questions]

Which of the following is a requirement in order to implement the principle of least privilege?

AMandatory Access Control (MAC)

BData normalization

CData classification

DDiscretionary Access Control (DAC)

Show Suggested Answer

Suggested Answer: D

by Tijuana at Jul 02, 2024, 07:10 PM

Limited Time Offer

25%

Off

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nobuko

3 months ago

I hear the principle of least privilege also requires you to wear a funny hat while coding. Or was that just for the IT support staff?

upvoted 0 times

...

Royce

3 months ago

Data classification? What does that have to do with least privilege? I'm going with the good old DAC for this one.

upvoted 0 times

Ahmed

28 days ago

Really? I thought MAC was more about controlling access based on labels rather than user discretion.

upvoted 0 times

...

Yong

1 months ago

I see your point, but MAC is actually the best choice for implementing the principle of least privilege.

upvoted 0 times

...

Sylvie

2 months ago

But data classification is important too, it helps determine the sensitivity of data and who should have access to it.

upvoted 0 times

...

Margart

2 months ago

DAC is a good choice, it allows users to control access to their own resources.

upvoted 0 times

...

Kanisha

3 months ago

Hmm, Mandatory Access Control (MAC) could also work, but I think Discretionary Access Control (DAC) is the more specific requirement here.

upvoted 0 times

Matthew

2 months ago

I believe both Mandatory Access Control (MAC) and Discretionary Access Control (DAC) are necessary to properly implement the principle of least privilege.

upvoted 0 times

...

German

2 months ago

I think Data classification is also important for determining the level of access that should be granted to users.

upvoted 0 times

...

Destiny

3 months ago

I agree, Discretionary Access Control (DAC) is more specific and essential for implementing the principle of least privilege.

upvoted 0 times

...

Amira

4 months ago

Data normalization? Come on, that's got nothing to do with access control! I'm going with DAC for this one.

upvoted 0 times

Adela

2 months ago

Exactly, DAC is the key for least privilege.

upvoted 0 times

...

Dorsey

3 months ago

Data normalization is not related to access control.

upvoted 0 times

...

Amber

3 months ago

I agree, DAC is definitely a requirement for implementing least privilege.

upvoted 0 times

...

Rebecka

3 months ago

DAC is the way to go for least privilege.

upvoted 0 times

...

Janna

4 months ago

I'm pretty sure the principle of least privilege requires Discretionary Access Control (DAC). That sounds like the right answer to me.

upvoted 0 times

Franchesca

3 months ago

No, I'm pretty sure it's Discretionary Access Control (DAC) that is needed for least privilege.

upvoted 0 times

...

Sang

3 months ago

I think it's actually Mandatory Access Control (MAC) that is required for the principle of least privilege.

upvoted 0 times

...

Bernadine

4 months ago

I think the answer is C) Data classification because it helps in determining the sensitivity of data

upvoted 0 times

...

Kimberely

4 months ago

I disagree, I believe the answer is D) Discretionary Access Control (DAC)

upvoted 0 times

...

Edelmira

4 months ago

I think the answer is A) Mandatory Access Control (MAC)

upvoted 0 times

...