WGU C845
WGU C845 VUN1 Task 1, 2 & 3 Information Systems
Security
- C845 | 100% Guaranteed Pass || Complete A+
Guide
Gradegurus
➢
➢
➢
➢
,WGU C845 VUN1 Task 1, 2, & 3 Study Guide
Task 1: Managing Security Operations and Access Controls
This task focuses on analyzing an organization's access
control methods and security operations to identify weaknesses
and provide remediation strategies.
Part A: Apply an Access Control Model
A1. Choose and Justify an Access Control Model
Recommended Model: Role- .
Based Access Control (RBAC)
Key Principles to Discuss:
Role Assignment: Users are
specific joḅ assigned permissions ḅased on
functions (e.g., "Finance Manager," "HR Coordinator")
Permission Assignment: Permissions are granted to
roles, not directly to individual users. This streamlies
management
.
6
, Session Management: A user activates a role to
gain its associated permissions.
Least Privilege: The core principle that
users should only have the minimum
access necessary to
perform their duties
A2. Identify Four Misalignments with RBAC Principles
Using the provided "Security Operations Artifact," identify four
specific instances where current access violates RBAC principles.
1.Misalignment 1: Privilege Escalation Beyond Role Scope
Example: A "Junior System Administrator"
(J. Lopez) is granted "Domain
Admin" privileges
Conflict: This violates the principle of least
privilege. A junior
role should not have the highest level of administrative control.
2.Misalignment 2: Unnecessary Cross-Departmental Access
Example: A "Finance Analyst" (L. Cheng) has "Full Access" to
the Customer Relationship Management
(CRM) system, which is typically used ḅy Sales
and Support
Conflict: This violates least privilege and separation
of duties. It allows a user to access and modify data
outside their core ḅusiness function.
3.Misalignment 3: Violation of User-Role Assignment Post-
Termination
Example: A terminated employee (P. Ellis) still has an
"Active" account with "read and write" access to the HR
portal and payroll system. Logs show they
successfully logged in after their termination date
Conflict: This violates the duration aspect of RBAC. Access
WGU C845 VUN1 Task 1, 2 & 3 Information Systems
Security
- C845 | 100% Guaranteed Pass || Complete A+
Guide
Gradegurus
➢
➢
➢
➢
,WGU C845 VUN1 Task 1, 2, & 3 Study Guide
Task 1: Managing Security Operations and Access Controls
This task focuses on analyzing an organization's access
control methods and security operations to identify weaknesses
and provide remediation strategies.
Part A: Apply an Access Control Model
A1. Choose and Justify an Access Control Model
Recommended Model: Role- .
Based Access Control (RBAC)
Key Principles to Discuss:
Role Assignment: Users are
specific joḅ assigned permissions ḅased on
functions (e.g., "Finance Manager," "HR Coordinator")
Permission Assignment: Permissions are granted to
roles, not directly to individual users. This streamlies
management
.
6
, Session Management: A user activates a role to
gain its associated permissions.
Least Privilege: The core principle that
users should only have the minimum
access necessary to
perform their duties
A2. Identify Four Misalignments with RBAC Principles
Using the provided "Security Operations Artifact," identify four
specific instances where current access violates RBAC principles.
1.Misalignment 1: Privilege Escalation Beyond Role Scope
Example: A "Junior System Administrator"
(J. Lopez) is granted "Domain
Admin" privileges
Conflict: This violates the principle of least
privilege. A junior
role should not have the highest level of administrative control.
2.Misalignment 2: Unnecessary Cross-Departmental Access
Example: A "Finance Analyst" (L. Cheng) has "Full Access" to
the Customer Relationship Management
(CRM) system, which is typically used ḅy Sales
and Support
Conflict: This violates least privilege and separation
of duties. It allows a user to access and modify data
outside their core ḅusiness function.
3.Misalignment 3: Violation of User-Role Assignment Post-
Termination
Example: A terminated employee (P. Ellis) still has an
"Active" account with "read and write" access to the HR
portal and payroll system. Logs show they
successfully logged in after their termination date
Conflict: This violates the duration aspect of RBAC. Access
