200-201 Question 75
Single answerA junior cybersecurity analyst is tasked with analyzing logs from a web server to investigate a potential intrusion. The analyst requests administrative privileges to complete the task. As a senior analyst, what is the best course of action regarding the requested privileges?
- A
Grant the analyst administrative privileges temporarily to allow them to complete the task.
- B
Deny the request and ask the analyst to use their current access level.
- C
Grant the analyst only the specific privileges required to access the logs.
- D
Provide unrestricted access to the server to facilitate faster analysis.
Show answer and explanation
Correct answer: C
Explanation
The principle of least privilege is a foundational concept in cybersecurity operations. By granting the junior analyst only the privileges needed to access the web server logs, the organization minimizes the risk of accidental or malicious actions while enabling the analyst to perform their job. It is essential to strike a balance between operational needs and security best practices.
- A. Incorrect.
Granting temporary administrative privileges is not a best practice as it provides excessive permissions, which could lead to unintentional or malicious changes to the system.
- B. Incorrect.
Denying the request outright does not help in fulfilling the task and may hinder the investigation process unnecessarily.
- C. Correct.
Granting only the specific privileges required to access the logs follows the principle of least privilege, ensuring the analyst has only the access they need without exposing the system to unnecessary risks.
- D. Incorrect.
Providing unrestricted access violates cybersecurity best practices and could lead to significant security risks, including potential misuse or accidental damage.