Discuss Isaca Cybersecurity-Audit-Certificate Exam Topic 1 Question 32

The administrator for a human resources (HR) system has access to the system as a user as well as support. Which of the following is the BEST control to help prevent intentional or accidental misuse of the privilege?

APerform background checks on any users or support with administrator access.

BEnsure frequent log monitoring of the administrator by a manager.

CSet up multi-factor authentication for privileged accounts.

DRequire the administrator to create a separate non-privileged user account for user tasks.

Suggested Answer: D

The best practice to prevent misuse of administrative privileges is to have administrators use a separate non-privileged account for routine tasks that do not require administrative rights. This reduces the risk of accidental changes or security breaches that could occur if the administrator's highly privileged account were compromised or misused during daily operations.

Reference= This control measure is aligned with the principle of least privilege and is commonly recommended in cybersecurity frameworks.While I cannot cite the Cybersecurity Audit Manual directly, similar guidelines are often included in cybersecurity literature and standards, including those from ISACA1. For specific references, please consult the ISACA Cybersecurity Audit resources.

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

32 comments · newest first

Hermila 10 months ago

MFA is good, but it’s not foolproof.

Vashti 11 months ago

Totally agree, separate accounts are a smart move!

Stephanie 11 months ago

Wait, can background checks really prevent misuse?

Jettie 11 months ago

I think frequent log monitoring is more effective.

Leatha 11 months ago

Multi-factor authentication is a must for privileged accounts!

Glendora 12 months ago

Background checks seem important, but I don't think they would prevent misuse once access is granted. I lean towards option D for better control.

Aliza 12 months ago

I feel like frequent log monitoring could help catch any misuse quickly, but I wonder if it's enough on its own. Option B might be useful.

Jerry 12 months ago

I'm not entirely sure, but I think multi-factor authentication is a good security measure too. Maybe option C could work?

Sue 1 year ago

I remember we discussed the importance of separating duties in class, so option D seems like a solid choice to prevent misuse.

Dalene 1 year ago

This is a classic security question. I'll focus on the principle of least privilege and choose the option that best limits the administrator's ability to misuse their access.

Carey 1 year ago

I'm a bit confused by the wording of the question. Let me re-read it and think through the pros and cons of each option before making my choice.

Corazon 1 year ago

Okay, I've got this. The key is to implement controls that limit the potential for misuse, like multi-factor authentication or requiring a separate non-privileged account.

Curtis 1 year ago

Hmm, I'm a bit unsure about this one. I'll need to review the concepts of privileged access and separation of duties to decide the best approach.

Jolene 1 year ago

This seems like a straightforward question about access controls. I'll need to think through the different options carefully.

Shaniqua 2 years ago

But wouldn't requiring the administrator to create a separate non-privileged user account also help prevent misuse?

Miesha 2 years ago

D sounds good too, but why not just go for the ultimate security with C?

Willow 2 years ago

↳ replying to Miesha

D) Require the administrator to create a separate non-privileged user account for user tasks.

Isadora 2 years ago

↳ replying to Miesha

C) Set up multi-factor authentication for privileged accounts.

Arleen 2 years ago

↳ replying to Miesha

A) Perform background checks on any users or support with administrator access.

Lavina 2 years ago

I agree with Nana, it adds an extra layer of security.

Darrin 2 years ago

Haha, I bet the administrator's password is 'password123'. C is the way to go for sure.

Iesha 2 years ago

I agree with C. MFA is a must-have these days, especially for critical systems like HR.

Anglea 2 years ago

↳ replying to Iesha

Definitely, MFA is a great way to prevent unauthorized access to HR data.

Evangelina 2 years ago

↳ replying to Iesha

I also believe C is the best choice. It's important to have that extra authentication step.

Thaddeus 2 years ago

↳ replying to Iesha

I agree, MFA is essential for protecting sensitive information.

Brynn 2 years ago

↳ replying to Iesha

I think C is the best option. MFA adds an extra layer of security.

Paris 2 years ago

C is definitely the best option. Multi-factor authentication is the gold standard for securing privileged accounts.

Chu 2 years ago

↳ replying to Paris

Having that extra security measure in place can help prevent misuse of privileges.

Crissy 2 years ago

↳ replying to Paris

I think setting up multi-factor authentication is a must for administrator access.

Erick 2 years ago

↳ replying to Paris

It's important to have that extra verification step for privileged accounts.

Pearly 2 years ago

↳ replying to Paris

I agree, multi-factor authentication adds an extra layer of security.

Nana 2 years ago

I think setting up multi-factor authentication is the best control.

Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 32 Discussion