CISM: Certified Information Security ManagerDemo

Question

Which of the following is the PRIMARY preventive approach for reducing risks associated with privileged accounts?

A Eliminate privileged accounts.
B Perform periodic certification of access to privileged accounts.
C Provide privileged account access only to users who need it.
D Frequently monitor activities on privileged accounts.

Explanation

Least privilege reduces privileged-account risk by limiting elevated access to only those users who require it for authorized duties. This prevents unnecessary access and reduces the potential attack surface.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ337

Community Discussion