QuestionQ2

Enterprise Application Architectures and Cloud Technologies

Attackers frequently gain system-administrator login privileges through a variety of attacks. Which of the following actions can improve the security of administrator accounts?

Choose two
  • A Encrypt passwords before transferring them. Whenever possible, transfer passwords by email.
  • B Periodically check whether unnecessary administrator accounts exist in the system. If such accounts exist, delete them to reduce the attack surface.
  • C Assign exclusive accounts for administrators with different maintenance roles to avoid account sharing.
  • D To ensure security and make the password easier to remember, you can set the password to be valid for a long time.
Explanation

Privileged access should follow least privilege and individual accountability. Regularly removing unneeded administrator accounts reduces the attack surface, while separate accounts for administrators in distinct maintenance roles prevent account sharing and make permissions and activity traceable to an individual.

Community Discussion

No comments yet. Be the first to start the discussion!