Soru

Zorluk: KolayIdentity and Access Management Operations

A system administrator is auditing user permissions following a departmental transfer. An employee moved from the Accounting department to Human Resources but still retains write access to the Accounting file share. Which of the following identity and access management operations should be executed to resolve this issue?

  1. Conduct an access privilege review to adjust permissions in accordance with least privilegeCevap
  2. B
    Require the transferred employee to re-authenticate using multi-factor authentication
  3. C
    Place the employee's new workstation on an internal trusted network segment behind an enterprise firewall
  4. D
    Deploy a deterrent physical control at the entry door of the Accounting department

Cevap

Conducting an access privilege review to adjust permissions in accordance with the principle of least privilege.
An access privilege review allows security administrators to audit user entitlements following organizational changes, revoking obsolete rights so that access aligns with the principle of least privilege.

Adım Adım Çözüm

1
Identify the administrative gap
The employee maintains rights to resources no longer required for their updated job role.
Job transfers often lead to privilege creep if rights from previous roles are not explicitly revoked.
2
Select the appropriate IAM lifecycle process
Perform an access recertification/review.
Periodic or event-driven access reviews evaluate authorization boundaries to remove unneeded entitlements.

Anahtar Kavram

Account Lifecycle Operations & Privilege Recertification
Bu soruyu puanla