QuestionQ37

VerifiedSecurity Orchestration and Automation

A security analyst has identified unauthorized access to System Configuration. You must examine the user’s current access level and restrict that access in line with your organization’s requirements.

As part of the audit process, which two actions should you take?

Choose two
Explanation

Role-based access is evaluated through the permissions and access controls that apply to the user. Reviewing effective permissions identifies the role responsible for the unauthorized access, and removing roles or CRUD permissions that are not required enforces least privilege. Record ownership and team hierarchy are not the direct remediation for excessive role-based access to System Configuration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!