exam questions

Exam SSCP All Questions

View all questions & answers for the SSCP exam

Exam SSCP topic 1 question 227 discussion

Actual exam question from ISC's SSCP
Question #: 227
Topic #: 1
[All SSCP Questions]

Why should batch files and scripts be stored in a protected area?

  • A. Because of the least privilege concept.
  • B. Because they cannot be accessed by operators.
  • C. Because they may contain credentials.
  • D. Because of the need-to-know concept.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Because scripts contain credentials, they must be stored in a protected area and the transmission of the scripts must be dealt with carefully. Operators might need access to batch files and scripts. The least privilege concept requires that each subject in a system be granted the most restrictive set of privileges needed for the performance of authorized tasks. The need-to-know principle requires a user having necessity for access to, knowledge of, or possession of specific information required to perform official tasks or services.
Source: WALLHOFF, John, CISSP Summary 2002, April 2002, CBK#1 Access Control System & Methodology (page 3)

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
435786e
1 week, 1 day ago
Selected Answer: C
I hate this answer. You should NEVER put passwords in plaintext in scripts or batch files. Always use a password hash or call on a hashed password file. This answer is ridiculously stupid. Least privilege makes so much more sense. 90% of my job is powershell and batch scripting and I keep my scripts secure so users don't break stuff by accidentally running them.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago