Exam Cybersecurity Fundamentals Specialist topic 1 question 43 discussion

correct answer - C

Multiuser accounts and shared passwords inherently increase the risk of unauthorized access. Shared passwords may be mishandled, leaked, or shared further, increasing the likelihood of unauthorized individuals gaining access.

answer=c

Multi-user on shared password is privilege escalation.

Answer C

The principle of least privilege should be applied to all administrator or otherwise privileged accounts on both IT and OT, in order to reduce the risk of privilege escalation. This control should be measured by ensuring that the principle is being applied when granting privileges and confirming that no accounts are designated as domain administrators. * Apply principle of least privilege to all administrator / privileged accounts * Privilege escalation Unauthorized access * No user account should always have administrator or super-user privileges. IT and OT assets NIST CSF: PR.AC ISA 62443-2- 14.3.3.7.3 ISA 62443-3-3 1 https://www.cisa.gov/sites/default/files/publications/Common_Baseline_v2_Controls_List_508c.pdf Page 4

It should be C

Answer C

shared accounts and passwords increase the likelihood of an unauthorized access

I agree its A - It escalates the privilege of some of the account users to the highest level required by any of the account multi-users. If someone is an approved user of a multi-user account, they have authorized access. But too much privilege.

clearly C