ExamGecko
Question list
Search
Search

Question 414 - CISM discussion

Report
Export

An information security manager has identified that privileged employee access requests to production servers are approved; but user actions are not logged. Which of the following should be the GREATEST concern with this situation?

A.
Lack of availability
Answers
A.
Lack of availability
B.
Lack of accountability
Answers
B.
Lack of accountability
C.
Improper authorization
Answers
C.
Improper authorization
D.
Inadequate authentication
Answers
D.
Inadequate authentication
Suggested answer: B

Explanation:

The greatest concern with the situation of privileged employee access requests to production servers being approved but not logged is the lack of accountability, which means the inability to trace or verify the actions and decisions of the privileged users. Lack of accountability can lead to security risks such as unauthorized changes, data breaches, fraud, or misuse of privileges. Logging user actions is a key component of privileged access management (PAM), which helps to monitor, detect, and prevent unauthorized privileged access to critical resources. The other options, such as lack of availability, improper authorization, or inadequate authentication, are not directly related to the situation of not logging user actions.

Reference:

https://www.microsoft.com/en-us/security/business/security-101/what-is-privileged-access-management-pam

https://www.ekransystem.com/en/blog/privileged-user-monitoring-best-practices

https://www.beyondtrust.com/resources/glossary/privileged-access-management-pam

asked 01/10/2024
Mathijn Smit
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first