Study. uk . com
  1. Home
  2. All questions
  3. Question 361

CISSP study material · question 361 of 500

A batch job runs as a domain administrator because that was the simplest way to grant it file access. Which two points from SP 800-53's least privilege control apply? Choose two.

  1. Least privilege is satisfied where the account's actions are fully logged.
  2. Processes should operate at privilege levels no higher than needed to accomplish the task.
  3. Additional processes, roles or accounts may be created specifically to achieve least privilege.
  4. Least privilege applies to interactive users only, so a batch job is out of scope.
Show the answer

Answer: B. Processes should operate at privilege levels no higher than needed to accomplish the task.
C. Additional processes, roles or accounts may be created specifically to achieve least privilege.

AC-6 applies least privilege to system processes as well as users, and says organisations consider creating additional processes, roles and accounts as necessary to achieve it.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53 Rev. 5 > AC-6 Least Privilege

Challenge yourself on this topic → Study as cards