A review of administrative access has discovered that too many accounts have been granted
administrative rights. Which of the following will alert the security team when elevated access is
applied?
A.
Establishing user access reviews
B.
Establishing user based privileges
C.
Establishing monitoring on accounts
D.
Establishing group based privileges
Key word: ALERT
An alrt is an action triggered by an event. So when an even ocurs, an alert is issued.
So alerts are NOT the product of reviews and privileges, as these are static activities not capable of trigering alerts
ELIMINATION:
A- Reviews do not triger alerts
B- user based privileges in themselves do not trigger alerts
D- group based privileges in themselves do not trigger alerts
So when we configure ( automatic) monitoring on accounts, an alert can be triggered when an event takes place ( i.e. the account is given administrative rights)
0
0