WGU C845 VUN1 Task 1 | Passed on First
Attempt |Latest Update with Complete Solution
VUN1 — qz
VUN1 Task 1: Managing Security Operations and Access Controls Informatio
qz qz qz qz qz qz qz qz qz qz
n Systems Security - C845
qz qz qz qz
A. Apply an Access Control Modelqz qz qz qz
A.1. Chosen Access Control Model qz qz qz
IqzhaveqzchosenqztheqzRole-BasedqzAccessqzControlqz(RBAC)qzmodel.qzTheqzprinciplesqzofqzRBACqzare:
• RoleqzAssignment:qzAqzuserqzisqzassignedqztoqzaqzroleqzbasedqzonqztheirqzjobqzfunctionqz(e.g.,qz"
FinanceqzAnalyst").
• PermissionqzAssignment:qzPermissionsqztoqzperformqzoperationsqzonqzsystemsqzareqzassignedqztoq
zroles,qznotqztoqzindividualqzusers.
• SessionqzManagement:qzAqzuserqzactivatesqzaqzroleqztoqzgainqztheqzassociatedqzpermissionsqzforqzaqzsession.
• LeastqzPrivilege:qzUsersqzshouldqzonlyqzhaveqztheqzminimumqzlevelqzofqzaccessqznecessaryqztoqzperfor
mqztheirqzjobqzduties.
Theqzorganization'sqzaccessqzcontrolqzstructure,qzasqzseenqzinqztheqzuserqzmatrix,qzisqzimplicitlyqzrole-
basedqz(e.g.,qz"Financeqzmanager,"qz"HRqzcoordinator").qzApplyingqzaqzformalqzRBACqzmodelqzwouldqzstreamli
neqzthisqzbyqzensuringqzpermissionsqzareqzstrictlyqztiedqztoqzbusinessqzfunctions,qzreducingqzcomplexityqzandq
ztheqzpotentialqzforqzuserqzerrorqzwhenqzassigningqzpermissions.
A.2. Four Misalignments with RBAC Principles
qz qz qz qz
1. Misalignmentqz1:qzPrivilegeqzEscalationqzBeyondqzRoleqzScope
• Description:qzTheqz"Juniorqzsystemqzadmin"qz(J.qzLopez)qzhasqz"Domainqzadmin"qzprivile
ges.qzAqzjuniorqzroleqzshouldqznotqzhaveqztheqzhighestqzlevelqzofqzaccessqzinqzaqzWindow
sqzenvironment.
• ConflictqzwithqzRBAC:qzThisqzviolatesqztheqzprincipleqzofqzleastqzprivilege.qzTheqzroleqz"Juniorqz
systemqzadmin"qzimpliesqzaqzsubsetqzofqzadministrativeqzduties,qznotqzunrestrictedqzdomain-
wideqzcontrol.
2. Misalignmentqz2:qzUnnecessaryqz Accessqz AcrossqzDepartments
messages.downloaded_by
,• Description:qzTheqz"Financeqzanalyst"qz(L.qzCheng)qzhasqz"Fullqzaccess"qztoqztheqzCRM,qzaqzsystem
messages.downloaded_by
, primarilyqzforqzSalesqzandqzSupport.qzAqzfinanceqzroleqztypicallyqzdoesqznotqzrequireqzfullqzmodi
ficationqzrightsqzinqzaqzcustomerqzrelationshipqzsystem.
• ConflictqzwithqzRBAC:qzThisqzviolatesqzleastqzprivilegeqzandqzseparationqzofqzduties.qzItqzall
owsqzforqzpotentialqzdataqzmanipulationqzoutsideqztheqzuser'sqzcoreqzbusinessqzfunction
.
3. Misalignmentqz3:qzViolationqzofqzUser-RoleqzAssignmentqzPost-Termination
• Description:qzTheqz"HRqzassistant"qz(P.qzEllis),qzwhoqzwasqzterminatedqzonqz2025-05-
20,qzhasqzanqz"Active"qzaccountqzstatusqzandqzsuccessfullyqzloggedqzinqzonqz2025-06-29.
• ConflictqzwithqzRBAC:qzRBACqzrequiresqztimelyqzrevocationqzofqzroleqzassignmentsqzuponqzaqz
changeqzinqzemploymentqzstatus.qzAnqzactiveqzsessionqzforqzaqzterminatedqzuserqzcompletel
yqzbypassesqztheqzsecurityqzprovidedqzbyqztheqzroleqzstructure.
4. Misalignmentqz4:qzOverlyqzBroadqzPrivilegedqzAccess
• Description:qzTheqz"ITqzadministrator"qz(T.qzMiller)qzhasqz"Fullqzadmin"qzaccessqztoqz"Allqzi
nternalqzsystems,"qzandqztheqzlogqzshowsqztheyqzmadeqzaqzfirewallqzruleqzchangeqzwith
outqzaqzticket_id.
• ConflictqzwithqzRBAC:qzWhileqzsomeqzaccessqzisqznecessary,qzblanketqz"Fullqzadmin"qzaccess
violatesqzleastqzprivilegeqzandqzimpedesqzaccountability.qzItqzdoesqznotqzsegmentqzdutiesqzwit
hinqztheqzITqzdepartmentqzitself.
messages.downloaded_by
Attempt |Latest Update with Complete Solution
VUN1 — qz
VUN1 Task 1: Managing Security Operations and Access Controls Informatio
qz qz qz qz qz qz qz qz qz qz
n Systems Security - C845
qz qz qz qz
A. Apply an Access Control Modelqz qz qz qz
A.1. Chosen Access Control Model qz qz qz
IqzhaveqzchosenqztheqzRole-BasedqzAccessqzControlqz(RBAC)qzmodel.qzTheqzprinciplesqzofqzRBACqzare:
• RoleqzAssignment:qzAqzuserqzisqzassignedqztoqzaqzroleqzbasedqzonqztheirqzjobqzfunctionqz(e.g.,qz"
FinanceqzAnalyst").
• PermissionqzAssignment:qzPermissionsqztoqzperformqzoperationsqzonqzsystemsqzareqzassignedqztoq
zroles,qznotqztoqzindividualqzusers.
• SessionqzManagement:qzAqzuserqzactivatesqzaqzroleqztoqzgainqztheqzassociatedqzpermissionsqzforqzaqzsession.
• LeastqzPrivilege:qzUsersqzshouldqzonlyqzhaveqztheqzminimumqzlevelqzofqzaccessqznecessaryqztoqzperfor
mqztheirqzjobqzduties.
Theqzorganization'sqzaccessqzcontrolqzstructure,qzasqzseenqzinqztheqzuserqzmatrix,qzisqzimplicitlyqzrole-
basedqz(e.g.,qz"Financeqzmanager,"qz"HRqzcoordinator").qzApplyingqzaqzformalqzRBACqzmodelqzwouldqzstreamli
neqzthisqzbyqzensuringqzpermissionsqzareqzstrictlyqztiedqztoqzbusinessqzfunctions,qzreducingqzcomplexityqzandq
ztheqzpotentialqzforqzuserqzerrorqzwhenqzassigningqzpermissions.
A.2. Four Misalignments with RBAC Principles
qz qz qz qz
1. Misalignmentqz1:qzPrivilegeqzEscalationqzBeyondqzRoleqzScope
• Description:qzTheqz"Juniorqzsystemqzadmin"qz(J.qzLopez)qzhasqz"Domainqzadmin"qzprivile
ges.qzAqzjuniorqzroleqzshouldqznotqzhaveqztheqzhighestqzlevelqzofqzaccessqzinqzaqzWindow
sqzenvironment.
• ConflictqzwithqzRBAC:qzThisqzviolatesqztheqzprincipleqzofqzleastqzprivilege.qzTheqzroleqz"Juniorqz
systemqzadmin"qzimpliesqzaqzsubsetqzofqzadministrativeqzduties,qznotqzunrestrictedqzdomain-
wideqzcontrol.
2. Misalignmentqz2:qzUnnecessaryqz Accessqz AcrossqzDepartments
messages.downloaded_by
,• Description:qzTheqz"Financeqzanalyst"qz(L.qzCheng)qzhasqz"Fullqzaccess"qztoqztheqzCRM,qzaqzsystem
messages.downloaded_by
, primarilyqzforqzSalesqzandqzSupport.qzAqzfinanceqzroleqztypicallyqzdoesqznotqzrequireqzfullqzmodi
ficationqzrightsqzinqzaqzcustomerqzrelationshipqzsystem.
• ConflictqzwithqzRBAC:qzThisqzviolatesqzleastqzprivilegeqzandqzseparationqzofqzduties.qzItqzall
owsqzforqzpotentialqzdataqzmanipulationqzoutsideqztheqzuser'sqzcoreqzbusinessqzfunction
.
3. Misalignmentqz3:qzViolationqzofqzUser-RoleqzAssignmentqzPost-Termination
• Description:qzTheqz"HRqzassistant"qz(P.qzEllis),qzwhoqzwasqzterminatedqzonqz2025-05-
20,qzhasqzanqz"Active"qzaccountqzstatusqzandqzsuccessfullyqzloggedqzinqzonqz2025-06-29.
• ConflictqzwithqzRBAC:qzRBACqzrequiresqztimelyqzrevocationqzofqzroleqzassignmentsqzuponqzaqz
changeqzinqzemploymentqzstatus.qzAnqzactiveqzsessionqzforqzaqzterminatedqzuserqzcompletel
yqzbypassesqztheqzsecurityqzprovidedqzbyqztheqzroleqzstructure.
4. Misalignmentqz4:qzOverlyqzBroadqzPrivilegedqzAccess
• Description:qzTheqz"ITqzadministrator"qz(T.qzMiller)qzhasqz"Fullqzadmin"qzaccessqztoqz"Allqzi
nternalqzsystems,"qzandqztheqzlogqzshowsqztheyqzmadeqzaqzfirewallqzruleqzchangeqzwith
outqzaqzticket_id.
• ConflictqzwithqzRBAC:qzWhileqzsomeqzaccessqzisqznecessary,qzblanketqz"Fullqzadmin"qzaccess
violatesqzleastqzprivilegeqzandqzimpedesqzaccountability.qzItqzdoesqznotqzsegmentqzdutiesqzwit
hinqztheqzITqzdepartmentqzitself.
messages.downloaded_by