WGU C845
WGU C845 VUN1 Task 1, 2 & 3 Information Systems Security
- C845 | 100% Guaranteed Pass || Complete A+ Guide
Gradegurus
➢
➢
➢
➢
,WGU C845 VUN1 Task 1, 2, & 3 Study Guide
Task 1: Managing Security Operations and Access Controls
This task focuses on analyzing an organization's access control
methods and security operations to identify ẅeaknesses and provide
remediation strategies.
Part A: Apply an Access Control Model
A1. Choose and Justify an Access Control Model
Recommended Model: Role- .
Based Access Control (RBAC)
Key Principles to Discuss:
Role Assignment: Users are
specific job
functions (e.g., "Finance Manager," "HR Coordinator")
Permission Assignment: Permissions are granted to roles,
not directly to individual users. This streamlies management
.
6
, Session Management: A user activates a role to gain its
associated permissions.
Least Privilege: The core principle that users
should only have the minimum
access necessary to
perform their duties
A2. Identify Four Misalignments ẅith RBAC Principles
Using the provided "Security Operations Artifact," identify four specific
instances ẅhere current access violates RBAC principles.
1.Misalignment 1: Privilege Escalation Beyond Role Scope
Example: A "Junior System Administrator" (J.
Lopez) is granted "Domain
Admin" privileges
Conflict: This violates the principle of least
privilege. A junior
role should not have the highest level of administrative control.
2.Misalignment 2: Unnecessary Cross-Departmental Access
Example: A "Finance Analyst" (L. Cheng) has "Full Access" to the
Customer Relationship Management (CRM) system, ẅhich is
typically used by Sales
and Support
Conflict: This violates least privilege and separation of
duties. It alloẅs a user to access and modify data outside their
core business function.
3.Misalignment 3: Violation of User-Role Assignment Post-
Termination
Example: A terminated employee (P. Ellis) still has an "Active"
account ẅith "read and ẅrite" access to the HR portal and payroll
system. Logs shoẅ they
successfully logged in after their termination date
Conflict: This violates the duration aspect of RBAC. Access
WGU C845 VUN1 Task 1, 2 & 3 Information Systems Security
- C845 | 100% Guaranteed Pass || Complete A+ Guide
Gradegurus
➢
➢
➢
➢
,WGU C845 VUN1 Task 1, 2, & 3 Study Guide
Task 1: Managing Security Operations and Access Controls
This task focuses on analyzing an organization's access control
methods and security operations to identify ẅeaknesses and provide
remediation strategies.
Part A: Apply an Access Control Model
A1. Choose and Justify an Access Control Model
Recommended Model: Role- .
Based Access Control (RBAC)
Key Principles to Discuss:
Role Assignment: Users are
specific job
functions (e.g., "Finance Manager," "HR Coordinator")
Permission Assignment: Permissions are granted to roles,
not directly to individual users. This streamlies management
.
6
, Session Management: A user activates a role to gain its
associated permissions.
Least Privilege: The core principle that users
should only have the minimum
access necessary to
perform their duties
A2. Identify Four Misalignments ẅith RBAC Principles
Using the provided "Security Operations Artifact," identify four specific
instances ẅhere current access violates RBAC principles.
1.Misalignment 1: Privilege Escalation Beyond Role Scope
Example: A "Junior System Administrator" (J.
Lopez) is granted "Domain
Admin" privileges
Conflict: This violates the principle of least
privilege. A junior
role should not have the highest level of administrative control.
2.Misalignment 2: Unnecessary Cross-Departmental Access
Example: A "Finance Analyst" (L. Cheng) has "Full Access" to the
Customer Relationship Management (CRM) system, ẅhich is
typically used by Sales
and Support
Conflict: This violates least privilege and separation of
duties. It alloẅs a user to access and modify data outside their
core business function.
3.Misalignment 3: Violation of User-Role Assignment Post-
Termination
Example: A terminated employee (P. Ellis) still has an "Active"
account ẅith "read and ẅrite" access to the HR portal and payroll
system. Logs shoẅ they
successfully logged in after their termination date
Conflict: This violates the duration aspect of RBAC. Access
