easyMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: An administrator reviews the exhibit
Exhibit
Refer to the exhibit. ``` User: jdoe Groups: Domain Users, VPN Users, HR-Read Effective Permissions on \\server\HRDocs: - Read - Write (inherited from HR-Read group) - Deny Delete ```
An administrator reviews the exhibit. Which security principle is being violated?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Least privilege
The user has write access to HR documents, which may not be necessary for their role, violating least privilege.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation is not relevant.
- ✗
Separation of duties
Why it's wrong here
No duty separation issue.
- ✓
Least privilege
Why this is correct
Correct. Write access may be excessive.
- ✗
Accountability
Why it's wrong here
Accountability is about logging, not permissions.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Least privilege
Least privilege is a security principle that means giving users, systems, or programs only the minimum permissions they need to do their job and nothing more.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
2 more ways this is tested on CC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A system administrator is configuring permissions for a new file server. To adhere to the principle of least privilege, which approach should the administrator take?
easy- A.Grant permissions only to the IT department.
- B.Grant permissions based on the user's department membership.
- ✓ C.Grant each user only the permissions necessary to perform their job duties.
- D.Grant all users full control to simplify management.
Variation 2. A security administrator needs to ensure that a user cannot view the contents of a file but can execute it. Which access control principle should be applied?
easy- A.Enforce separation of duties
- ✓ B.Apply least privilege
- C.Use defense in depth
- D.Implement need-to-know
Why B: Least privilege grants only the permissions necessary to perform a task. The user only needs execute, not read. Option A (separation of duties) divides tasks among different people, which is not relevant. Option B (least privilege) is correct because it restricts access to the minimum required. Option C (defense in depth) uses multiple layers of security. Option D (need-to-know) limits access to sensitive information but does not cover execution. Therefore, Option B is correct.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.