MENU
An organization has implemented a control for Controlled Use of Administrative Privilege. The control requires users to enter a password from their own user account before being allowed elevated privileges, and that no client applications (e.g. web browsers, e-mail clients) can be run with elevated privileges. Which of the following actions will validate this control is implemented properly?
Suggested Answer: B
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
23 comments · newest first
LI
Ligia
9 months ago
I agree with A, it's the most straightforward way to validate.
MA
Mayra
10 months ago
C is irrelevant here, doesn't relate to the control at all.
FR
Francene
10 months ago
A is definitely the best choice. Log entries tell the whole story!
EL
Eladia
10 months ago
B seems useful too, but not as direct as A.
LO
Louis
10 months ago
Wait, can you really trust log entries? They can be tampered with!
RO
Rolande
11 months ago
I might be overthinking it, but I wonder if we need to combine multiple methods to really validate that the control is working as intended.
IV
Ivette
11 months ago
I feel like forcing the root account to be accessible only from the console is more about securing the root account itself, not directly related to validating the control we have here.
CA
Catrice
11 months ago
I remember a practice question about running scripts to monitor processes. That seems like a good way to ensure no unauthorized applications are running with elevated privileges.
GI
Gilma
11 months ago
I think checking the log entries is important because it shows who accessed elevated privileges, but I'm not sure if that's enough to validate the control.
LA
Lavelle
11 months ago
I've got a good feeling about this one. Option A seems like the most straightforward way to validate the control, by checking the logs to ensure privilege use matches authorized users. I'll go with that.
AJ
Aja
12 months ago
I'm a little confused by this question. The options don't seem to directly address the specific control requirements mentioned. I'll need to re-read the question and think about how each option relates to validating that the control is implemented properly.
EL
Elizabeth
12 months ago
Okay, let me break this down. The control requires users to enter their own password for elevated privileges, and no client apps can run with elevated privileges. I think option A about checking the logs might be the best approach to validate that.
MI
Michell
12 months ago
Hmm, I'm a bit unsure about this one. The question is asking about validating the control, but the options don't seem to directly address that. I'll need to think carefully about how each option relates to the control requirements.
ST
Stephaine
1 year ago
This seems like a straightforward question about validating a specific control. I think I'll start by carefully reading through the options and considering which one best matches the requirements described in the question.
TE
Teddy
1 year ago
Hah, force the root account to only be accessible from the system console? What is this, the 90s? We're way past that level of security these days.
KI
King
1 year ago
I think option A is the best way to validate the control.
LI
Lili
1 year ago
Running a script to identify processes with admin privileges is a good idea too. That could catch any sneaky apps trying to run under the radar.
RO
Rory
1 year ago
I agree, checking the logs is the way to go. That way we can see if any unauthorized users are accessing the admin privileges.
FR
Frank
1 year ago
A) Check the log entries to match privilege use with access from authorized users.
BE
Beata
1 year ago
The log entries seem like the best way to validate the control. We need to see who is actually using the elevated privileges.
CA
Cary
1 year ago
A) That's a good point. The log entries will show us exactly who is using the elevated privileges.
CO
Cora
1 year ago
B) Run a script at intervals to identify processes running with administrative privilege.
SA
Samira
1 year ago
A) Check the log entries to match privilege use with access from authorized users.