Practice Question · CISSP Study Group

Practice Question

An employee at a large enterprise has moved to a new department. Their new role does not require access to the project management system used in the previous department. However, access is still active. What principle has been violated and what should the IAM team implement to prevent similar issues?

A. Principle of Least Privilege; Implement RBAC with periodic access reviews.

B. Separation of Duties; Require dual approval for role changes.

C. Principle of Accountability; Require stronger authentication methods.

D. Need to Know; Use SSO to streamline access control.

16 comments