C795 Lesson 3 Questions
Which security principle involves the knowledge and possession of sensitive material as
an aspect of one's occupation?
A. Principle of least privilege
B. Separation of duties
C. Need to know
D. As-needed basis - answerC. Need to know
An organization ensures that users are granted access to only the data they need to
perform specific work tasks. What principle are they following?
A. Principle of least permission
B. Separation of duties (SoD)
C. Need to know
D. Job rotation - answerC. Need to know
What concept is used to grants users only the rights and permissions they need to
complete their job responsibilities?
A. Need to know
B. Mandatory vacations
C. Least privilege principle
D. Service-level agreement (SLA) - answerC. Least privilege principle
A large organization using a Microsoft domain wants to limit the amount of time users
have elevated privileges. Which of the following security operation concepts can be
used to support this goal?
A. Principle of least permission
B. Separation of duties
C. Need to know
D. Privileged account management - answerD. Privileged account management
An administrator is granting permissions to a database. What is the default level of
access the administrator should grant to new users in the organization?
A. Read
B. Modify
C. Full access
D. No access - answerD. No access
, You want to apply the least privilege principle when creating new accounts in the
software development department. Which of the following should you do?
A. Create each account with only the rights and permissions needed by the employee to
perform their job.
B. Give each account full rights and permissions to the servers in the software
development department.
C. Create each account with no rights and permissions.
D. Add the accounts to the local Administrators group on the new employee's computer.
- answerA. Create each account with only the rights and permissions needed by the
employee to perform their job.
Your organization has divided a high-level auditing function into several individual job
tasks. These tasks are divided between three administrators. None of the administrators
can perform all of the tasks. What does this describe?
A. Job rotation
B. Mandatory vacation
C. Separation of duties
D. Least privilege - answerC. Separation of duties
A financial organization commonly has employees switch duty responsibilities every 6
months. What security principle are they employing?
A. Job rotation
B. Separation of duties
C. Mandatory vacations
D. Least privilege - answerA. Job rotation
Which of the following is one of the primary reasons an organization enforces a
mandatory vacation policy?
A. To rotate job responsibilities
B. To detect fraud
C. To increase employee productivity
D. To reduce employee stress levels - answerB. To detect fraud
Your organization has contracted with a third-party provider to host cloud-based
servers. Management wants to ensure there are monetary penalties if the third party
doesn't meet their contractual responsibilities related to uptimes and downtimes. Which
of the following is the best choice to meet this requirement?
A. MOU
B. ISA
C. SLA
D. SED - answerC. SLA
Which security principle involves the knowledge and possession of sensitive material as
an aspect of one's occupation?
A. Principle of least privilege
B. Separation of duties
C. Need to know
D. As-needed basis - answerC. Need to know
An organization ensures that users are granted access to only the data they need to
perform specific work tasks. What principle are they following?
A. Principle of least permission
B. Separation of duties (SoD)
C. Need to know
D. Job rotation - answerC. Need to know
What concept is used to grants users only the rights and permissions they need to
complete their job responsibilities?
A. Need to know
B. Mandatory vacations
C. Least privilege principle
D. Service-level agreement (SLA) - answerC. Least privilege principle
A large organization using a Microsoft domain wants to limit the amount of time users
have elevated privileges. Which of the following security operation concepts can be
used to support this goal?
A. Principle of least permission
B. Separation of duties
C. Need to know
D. Privileged account management - answerD. Privileged account management
An administrator is granting permissions to a database. What is the default level of
access the administrator should grant to new users in the organization?
A. Read
B. Modify
C. Full access
D. No access - answerD. No access
, You want to apply the least privilege principle when creating new accounts in the
software development department. Which of the following should you do?
A. Create each account with only the rights and permissions needed by the employee to
perform their job.
B. Give each account full rights and permissions to the servers in the software
development department.
C. Create each account with no rights and permissions.
D. Add the accounts to the local Administrators group on the new employee's computer.
- answerA. Create each account with only the rights and permissions needed by the
employee to perform their job.
Your organization has divided a high-level auditing function into several individual job
tasks. These tasks are divided between three administrators. None of the administrators
can perform all of the tasks. What does this describe?
A. Job rotation
B. Mandatory vacation
C. Separation of duties
D. Least privilege - answerC. Separation of duties
A financial organization commonly has employees switch duty responsibilities every 6
months. What security principle are they employing?
A. Job rotation
B. Separation of duties
C. Mandatory vacations
D. Least privilege - answerA. Job rotation
Which of the following is one of the primary reasons an organization enforces a
mandatory vacation policy?
A. To rotate job responsibilities
B. To detect fraud
C. To increase employee productivity
D. To reduce employee stress levels - answerB. To detect fraud
Your organization has contracted with a third-party provider to host cloud-based
servers. Management wants to ensure there are monetary penalties if the third party
doesn't meet their contractual responsibilities related to uptimes and downtimes. Which
of the following is the best choice to meet this requirement?
A. MOU
B. ISA
C. SLA
D. SED - answerC. SLA
