CISSP Practice Question (Domain 5: Identity and Access Management)
A newly acquired subsidiary uses shared administrator accounts for critical infrastructure management. The integration team wants to immediately enforce individual accounts, but operations warns this could disrupt 24/7 production systems.
What is the MOST appropriate next step?
A. Implement privileged access management with session recording for shared accounts
B. Require individual accounts with emergency break-glass procedures for continuity
C. Assess the shared account inventory and map dependencies before enforcing changes
D. Accept the risk temporarily and schedule individual account rollout for next quarter
Come back for the answer tomorrow, or study more now!
0
8 comments
Vincent Primiani
7
CISSP Practice Question (Domain 5: Identity and Access Management)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by