CISA Question 143

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B3

  In a 24/7 processing environment, changing privileged application account passwords (such as by scheduling downtime) could disrupt critical operations. Introducing database access monitoring allows the organization to mitigate risks associated with these accounts while minimizing business disruption. Monitoring provides visibility into who or what is accessing the database and can identify suspicious activities, unauthorized access, or potential abuse of privileged accounts.

• Chose C1

  In a 24/7 processing environment, where continuous operation is critical for business operations, changing passwords that are set to "never expire" might lead to disruptions or downtime if not managed carefully. Modifying the access management policy to make allowances for application accounts can involve implementing compensating controls or alternative security measures to mitigate the risk associated with passwords that do not expire while ensuring continuous operation. Option B, introducing database access monitoring into the environment, is a valuable security measure, but it may not directly address the risk posed by privileged application accounts with passwords set to "never expire." Access monitoring can help detect and respond to unauthorized access attempts or suspicious activities, but it doesn't inherently address the issue of passwords not expiring.

• Chose C2

  Option C specifically targets the root cause of the risk by establishing guidelines or controls tailored to address the unique requirements of privileged application accounts. This approach allows organizations to enforce password management practices, such as periodic password changes or enhanced security measures, without disrupting business operations or requiring immediate downtime.