Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
The principle of least privilege should be applied to all administrator or otherwise privileged accounts on both IT and OT, in order to reduce the risk of privilege escalation. This control should be measured by ensuring that the principle is being applied when granting privileges and confirming that no accounts are designated as domain administrators.
* Apply principle of least privilege to all administrator / privileged accounts
* Privilege escalation Unauthorized access
* No user account should always have administrator or super-user privileges.
IT and OT assets NIST CSF:
PR.AC
ISA 62443-2-
14.3.3.7.3
ISA 62443-3-3 1
https://www.cisa.gov/sites/default/files/publications/Common_Baseline_v2_Controls_List_508c.pdf
Page 4
Agreed. But, It doesn't say "Shared Accounts" or "Shared Passwords" it says "Multi-User" accounts which implies they are authorized accounts set up for multiple users. For instance, a process engineering station with a single login, a trainee logging on will likely have the same privileges as a supervisor on the account - hence privilege escalation. Poor question anyway.
I agree its A - It escalates the privilege of some of the account users to the highest level required by any of the account multi-users.
If someone is an approved user of a multi-user account, they have authorized access. But too much privilege.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
vale_lisey
Highly Voted 9 months, 2 weeks agoCapibaraChris
Most Recent 3 weeks, 1 day agoac873d6
1 month, 3 weeks agoac873d6
1 month, 3 weeks agobe2a79c
2 months, 3 weeks agoBeavis_123
3 months, 2 weeks agofermins
6 months, 1 week agoChrisW9200
5 months, 2 weeks agoChrisW9200
5 months, 2 weeks agoChrisW9200
6 months, 1 week agofermins
6 months, 1 week ago