ISC2 CISSP Exam - Topic 5 Question 30 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 30
Topic #: 5

In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what changes should be made to the resource's access to the production operating system (OS) directory structure?

AFrom Read Only privileges to No Access Privileges

BFrom Author privileges to Administrator privileges

CFrom Administrator privileges to No Access privileges

DFrom No Access Privileges to Author privileges

Show Suggested Answer

Suggested Answer: C

by Ashlyn at May 09, 2022, 04:46 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edda

5 months ago

Read Only to No Access makes sense for security.

upvoted 0 times

...

Judy

6 months ago

Isn't No Access too extreme?

upvoted 0 times

...

Ludivina

6 months ago

Wait, why would you give Author privileges?

upvoted 0 times

...

Kristel

6 months ago

Agreed, least privilege is key!

upvoted 0 times

...

Lettie

6 months ago

Definitely should go from Admin to No Access.

upvoted 0 times

...

Chu

6 months ago

I feel like option B is definitely wrong since we shouldn't be giving more access. But I'm confused about whether A or C is better.

upvoted 0 times

...

Lang

6 months ago

I'm not entirely sure, but I remember a practice question where we had to downgrade privileges. Could it be option C?

upvoted 0 times

...

Tien

6 months ago

I think the least privilege principle means we should restrict access as much as possible, so maybe option A makes sense?

upvoted 0 times

...

Delbert

6 months ago

I recall something about minimizing access, but I can't remember if "No Access" is always the right choice. This is tricky!

upvoted 0 times

...

Corinne

6 months ago

Hmm, this is a bit technical. I'll focus on the main concepts first - the water levels, alarms, and restrictions on writing/reading data. Then I'll match that up with the answer choices to identify the one that is wrong.

upvoted 0 times

...

Lashawna

6 months ago

Hmm, I'm a bit confused about the filesystem option. How would that help prevent session hijacking? I'm not sure that's the right approach here. I think I'll focus on the encryption and spoof rule options.

upvoted 0 times

...