Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSMP Exam - Topic 4 Question 12 Discussion

Posted by Lonna on May 03, 2022 at 04:13 AM

You are the Network Administrator for a software company. Due to the nature of your company's business, you have a significant number of highly computer savvy users. However, you have still decided to limit each user access to only those resources required for their job, rather

than give wider access to the technical users (such as tech support and software engineering personnel). What is this an example of?

Suggested Answer: B

No matter how technically proficient the users are, it is always proper for an administrator to grant each user the least/lowest privileges possible for them to do their job (thus the term least privileges). You should never grant any user any more access than they require to perform their job functions.

Answer option D is incorrect. This is absolutely not poor resource management, but rather wise security policy, thus wise resource management.

Answer option A is incorrect. The term 'maximum control' is not a valid network security term.

Answer option C is incorrect. An ACL or access control list is used to control access to resources by matching a user on the list with rights to a resource. This may or may not have the user with more access than their job requires.


Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
11 comments · newest first
MI
Mila 11 months ago
I thought it was about maximum control, not least privileges.
WA
Wava 12 months ago
This is just good security practice, no doubt!
MA
Malcolm 12 months ago
Wait, is this really a good idea?
LE
Leah 12 months ago
I agree, it makes sense to limit access.
IS
Isadora 1 year ago
Definitely the principle of least privileges.
AN
Angella 1 year ago
I feel like this is a classic example of least privileges, especially since it mentions limiting access for tech-savvy users.
CH
Cherelle 1 year ago
I remember practicing a similar question, and I think the answer was definitely about restricting access to what users need for their jobs.
SA
Salina 1 year ago
I think this is about limiting access, so it might be the principle of least privileges, but I'm not entirely sure.
HE
Helga 1 year ago
I'm a bit confused; could it be the principle of maximum control? That sounds familiar, but it doesn't quite fit the scenario.
RH
Rhea 1 year ago
I think I know the answer, but I want to double-check my understanding before selecting an option.
MA
Marcos 1 year ago
Salesforce Anywhere seems like it could be a flexible solution, but I'm not sure if it's the best fit for this specific scenario. I'll need to weigh the pros and cons of each option.
0/2000 characters

Save Cancel