MENU
In order to support the least privilege security principle when a resource is transferring within the organization from a production support system administration role to a developer role, what changes should be made to the resource's access to the production operating system (OS) directory structure?
Suggested Answer: C
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
ED
Edda
11 months ago
Read Only to No Access makes sense for security.
JU
Judy
12 months ago
Isn't No Access too extreme?
LU
Ludivina
12 months ago
Wait, why would you give Author privileges?
KR
Kristel
12 months ago
Agreed, least privilege is key!
LE
Lettie
1 year ago
Definitely should go from Admin to No Access.
CH
Chu
1 year ago
I feel like option B is definitely wrong since we shouldn't be giving more access. But I'm confused about whether A or C is better.
LA
Lang
1 year ago
I'm not entirely sure, but I remember a practice question where we had to downgrade privileges. Could it be option C?
TI
Tien
1 year ago
I think the least privilege principle means we should restrict access as much as possible, so maybe option A makes sense?
DE
Delbert
1 year ago
I recall something about minimizing access, but I can't remember if "No Access" is always the right choice. This is tricky!
CO
Corinne
1 year ago
Hmm, this is a bit technical. I'll focus on the main concepts first - the water levels, alarms, and restrictions on writing/reading data. Then I'll match that up with the answer choices to identify the one that is wrong.
LA
Lashawna
1 year ago
Hmm, I'm a bit confused about the filesystem option. How would that help prevent session hijacking? I'm not sure that's the right approach here. I think I'll focus on the encryption and spoof rule options.