One of the similar CISSP questions

An organization, in its rush to implement an IAM system, has granted a user elevated permissions—typically not required for their role—allowing them to assign additional permissions to other users. This was done primarily to reduce the workload on existing administrators. what do you think as the mode of the access

1) Least privilages 2) Need to Know 3) Privilage creep 4) Excessive privilages

Any suggestions

9 comments