Isaca CDPSE Exam - Topic 3 Question 38 Discussion

Actual exam question for Isaca's CDPSE exam

Question #: 38
Topic #: 3

Which of the following principles is MOST important to apply when granting access to an enterprise resource planning (ERP) system that contains a significant amount of personal data?

ARead-only access

BLeast privilege

CSegregation of duties

DData minimization

Show Suggested Answer

Suggested Answer: B

The principle of least privilege is the most important principle to apply when granting access to an ERP system that contains a significant amount of personal dat

a. The principle of least privilege states that users should only have the minimum level of access and permissions necessary to perform their legitimate tasks and functions, and no more. Applying the principle of least privilege helps to protect the privacy and security of the personal data in the ERP system, as it reduces the risk of unauthorized or inappropriate access, disclosure, modification, or deletion of the data. It also helps to comply with the privacy laws and regulations, such as the GDPR, that require data controllers and processors to implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

by Jess at Apr 11, 2024, 10:12 PM

Limited Time Offer

25%

Off

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Margart

3 months ago

Segregation of duties sounds good, but is it really necessary here?

upvoted 0 times

...

Lashawnda

3 months ago

Totally agree with least privilege! It's crucial.

upvoted 0 times

...

Launa

3 months ago

Wait, isn't data minimization more important?

upvoted 0 times

...

Milly

4 months ago

I think read-only access is enough in some cases.

upvoted 0 times

...

Pok

4 months ago

Least privilege is definitely the way to go!

upvoted 0 times

...

Latanya

4 months ago

I practiced a question similar to this, and I think read-only access could be useful, but it might not be the best choice overall for sensitive data.

upvoted 0 times

...

Alline

4 months ago

Data minimization sounds familiar, but I feel like least privilege might be the more critical principle for access control in this case.

upvoted 0 times

...

Felicidad

4 months ago

I'm not entirely sure, but I remember something about segregation of duties being crucial in preventing fraud. Maybe that's relevant here too?

upvoted 0 times

...

Tabetha

5 months ago

I think least privilege is really important, especially since we're dealing with personal data. It limits access to only what users need.

upvoted 0 times

...

Claribel

5 months ago

Read-only access could work, but I think least privilege is the better choice. It's more flexible and can be tailored to each user's specific needs.

upvoted 0 times

...

Paola

5 months ago

Definitely go with least privilege. That ensures users only have access to the minimum information they need to do their jobs, which is crucial for sensitive personal data.

upvoted 0 times

...

William

5 months ago

Hmm, I'm a bit unsure on this one. I know the principles of least privilege and data minimization are important for data privacy, but I'm not sure which one is most critical in this case.

upvoted 0 times

...

Domonique

5 months ago

I think the key here is to focus on the principle that will best protect the personal data in the ERP system. Least privilege seems like the most important one to apply.

upvoted 0 times

...

Elise

5 months ago

I'm pretty sure the answer is A. grub-install is the command to install the GRUB boot loader into the master boot record.

upvoted 0 times

...

Tamesha

5 months ago

The Charpy impact test definitely seems like the right answer for toughness, though I've heard people mention metallography when discussing material properties.

upvoted 0 times

...

Royal

5 months ago

I'm a little confused by the wording of the question. Does "all of the shipment" mean a single shipment or multiple shipments? That could impact which policy would be most appropriate.

upvoted 0 times

...

Josephine

5 months ago

Ah, I think I've got it! Based on the details in the question, I'm pretty sure the answer is B - 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices. That sounds like the right law for regulating email scams and mail fraud.

upvoted 0 times

...

Pearly

5 months ago

This question seems a bit technical, but I think I can work through it. Let me carefully read the options and see if I can identify the key measurement configuration messages.

upvoted 0 times

...

Luz

2 years ago

Data minimization is important too, to reduce the risk of exposure.

upvoted 0 times

...

Tony

2 years ago

I believe segregation of duties is also crucial to prevent unauthorized access.

upvoted 0 times

...

Kara

2 years ago

I agree with Lucy, least privilege ensures that only necessary access is granted.

upvoted 0 times

...

Lucy

2 years ago

I think the most important principle is least privilege.

upvoted 0 times

...

Leonor

2 years ago

Segregation of duties is also crucial to prevent misuse of personal data.

upvoted 0 times

...

Isabella

2 years ago

But what about data minimization? Isn't that important too?

upvoted 0 times

...

Kiley

2 years ago

I agree with User1, least privilege limits access to only what's necessary.

upvoted 0 times

...

Stephanie

2 years ago

I think the most important principle is least privilege.

upvoted 0 times

Rene

2 years ago

Segregation of duties also plays a key role in maintaining data integrity.

upvoted 0 times

...

Rebecka

2 years ago

I agree, least privilege is crucial in protecting personal data.

upvoted 0 times

...

Horace

2 years ago

You know what they say, 'with great power comes great responsibility.' That's why I'm leaning towards Least Privilege. Let's give people just enough access to get their jobs done, and no more.

upvoted 0 times

...

Sherell

2 years ago

Ooh, good point. Segregation of Duties is definitely up there. Can't have one person controlling everything, that's just asking for trouble. Although, I still think Least Privilege is the way to go.

upvoted 0 times

...

Armanda

2 years ago

Hmm, I don't know. Segregation of Duties seems pretty important too. We gotta make sure no one person has too much power over the system, you know? Checks and balances and all that.

upvoted 0 times

...

Inocencia

2 years ago

Data Minimization, huh? I like the way you think. Less data to worry about means less risk of a breach. Plus, it's just good privacy practice. I'm going with that one.

upvoted 0 times

Carla

2 years ago

In the end, it's important to consider all these principles when granting access to sensitive data.

upvoted 0 times

...

Stephaine

2 years ago

You're right, separating duties can help maintain accountability and prevent misuse of data.

upvoted 0 times

...

Brett

2 years ago

But segregation of duties is also important to prevent conflicts of interest and fraud.

upvoted 0 times

...

Bette

2 years ago

True, giving users only the access they need reduces the risk of unauthorized actions.

upvoted 0 times

...

Louann

2 years ago

I think least privilege is also crucial in granting access to an ERP system.

upvoted 0 times

...

Myra

2 years ago

I agree, less data means less risk of a breach. It's a good practice for privacy.

upvoted 0 times

...

Thomasena

2 years ago

Data minimization is definitely important when it comes to personal data in an ERP system.

upvoted 0 times

...

Alpha

2 years ago

I agree, Least Privilege is key. But I also think Data Minimization is crucial. We should only be collecting and storing the personal data that's absolutely necessary. Anything else is just asking for trouble down the line.

upvoted 0 times

...

Portia

2 years ago

Hmm, this is a tough one. I'd say Least Privilege is the most important principle here. We need to make sure users only have access to the bare minimum they need to do their jobs. Anything more could be a security nightmare waiting to happen.

upvoted 0 times

...