Disclaimer:
Educational Use Only:
The website links provided are to be used strictly for educational and knowledge-gaining purposes only.
No Misuse:
Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.
Respect for Websites and Businesses:
Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.
Acknowledge Value of Knowledge:
Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.
No Endorsement:
The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.
User Responsibility:
By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.
- Which type of account is primarily used for regular day-to-day access to IT systems?
a. Privileged account
b. Root account
c. Standard user account
d. Service account
Answer: c. Standard user accountssh - What is a privileged account?
a. An account with only read-level access to files
b. An account with default privileges equal to standard users
c. An account with higher permissions allowing critical system changes
d. An account used only for network logins
Answer: c. An account with higher permissions allowing critical system changesminiorange - Which account typically has the highest level of system privileges on Unix/Linux?
a. Administrator account
b. User account
c. Root account
d. Guest account
Answer: c. Root accountminiorange - What is the primary purpose of a service account?
a. To grant guests access to public files
b. To enable automated services and applications to access resources
c. To allow database administrators to log in
d. For end-user login purposes
Answer: b. To enable automated services and applications to access resourcesssh+1 - In Windows environments, which account type is used to manage domain-wide resources?
a. Local admin account
b. Guest account
c. Domain administrator account
d. Non-user account
Answer: c. Domain administrator accountminiorange - What is a “break glass” account?
a. A general user account for temporary workers
b. An emergency account for critical system access
c. An account to manage software licenses
d. An account for inactive users
Answer: b. An emergency account for critical system accessminiorange - Which account type generally represents identities for automated processes instead of individuals?
a. Privileged user account
b. Guest account
c. Service account
d. DBA account
Answer: c. Service accountssh+1 - What does the term “interactive account” refer to?
a. Any non-user account
b. An account used by humans to log in and operate a system
c. An account for external partners
d. A root-level account for scripts
Answer: b. An account used by humans to log in and operate a systemssh - Privileged Access Management (PAM) is primarily used to:
a. Manage standard user passwords only
b. Control and monitor privileged account access
c. Encrypt end-user data files
d. Track website administrator logins
Answer: b. Control and monitor privileged account accessssh+1 - Which of the following is an example of a system account?
a. Guest account
b. Root account
c. Temporary user account
d. Standard user account
Answer: b. Root accountminiorange+1 - What is the main security risk posed by privileged accounts?
a. Inactive accounts can be reused by employees
b. They provide potential attackers with elevated access to sensitive systems
c. They allow only limited network access
d. They do not keep audit trails
Answer: b. They provide potential attackers with elevated access to sensitive systemsminiorange - Which account type in a database environment allows full system changes and data modification?
a. Application account
b. Database Administrator (DBA) account
c. Service account
d. Guest account
Answer: b. Database Administrator (DBA) accountminiorange - Non-user accounts are typically:
a. Standard user accounts
b. Service or system accounts not assigned to real users
c. Reserved for hardware devices only
d. Used for guest logins
Answer: b. Service or system accounts not assigned to real usersssh - Application accounts are MOST often used by:
a. Scripts and programs needing system-level rights
b. End-users performing standard tasks
c. Database administrators for backups
d. Internal auditing teams
Answer: a. Scripts and programs needing system-level rightsminiorange - What should be strictly limited to minimize security risks in organizations?
a. Number of guest accounts
b. Number of regular user accounts
c. Number of privileged accounts, especially domain admins
d. Number of software licenses
Answer: c. Number of privileged accounts, especially domain adminsminiorange - Why should the use of shared passwords for privileged accounts be avoided?
a. They are difficult to remember
b. They complicate software updates
c. Shared use decreases accountability and increases risk
d. Users might forget to log out
Answer: c. Shared use decreases accountability and increases riskminiorange - Which account is mainly used for network device management?
a. Emergency account
b. Network account
c. Guest account
d. Supervisor account
Answer: b. Network accountminiorange - Which of the following BEST describes guest accounts?
a. Accounts with full system privileges
b. Accounts created for regular employees
c. Accounts with restricted, temporary, or minimal system access
d. Service accounts for database access
Answer: c. Accounts with restricted, temporary, or minimal system accessssh - What privilege level does a standard user account generally possess?
a. Administrative rights
b. Least privileges required to perform regular tasks
c. Domain-wide control
d. Full root access
Answer: b. Least privileges required to perform regular tasksssh - Who typically manages the assignment of privileged accounts?
a. Board of directors
b. Security team or IT administrators
c. Regular users
d. Database auditors
Answer: b. Security team or IT administratorsminiorange - Which principle should guide permission assignment for service accounts?
a. Principle of least privilege
b. Open access policy
c. User convenience
d. Random password allocation
Answer: a. Principle of least privilegeminiorange - What are privileged user accounts frequently used for?
a. Running IT support functions with local administrative privileges
b. Reading web content anonymously
c. Restricting access to backup files
d. Encrypting database records only
Answer: a. Running IT support functions with local administrative privilegesminiorange - Which is a significant weakness of many application accounts?
a. They require multifactor authentication
b. They often use default credentials, increasing risk
c. They are always time-bound
d. They must have interactive logins enabled
Answer: b. They often use default credentials, increasing riskminiorange - Which cybersecurity control is vital for break glass (emergency) account usage?
a. Permanent access with no logging
b. Anonymous access only
c. Time-restricted access with strong auditing
d. Default password access
Answer: c. Time-restricted access with strong auditingminiorange - What is a primary reason to monitor privileged account activities?
a. Boost graphics performance
b. Detect unauthorized activities and prevent breaches
c. Reduce software licensing fees
d. Schedule email notifications
Answer: b. Detect unauthorized activities and prevent breachesssh+1 - Which type of privileged account manages the core operating system processes?
a. Root account
b. Guest account
c. Application account
d. Network account
Answer: a. Root accountminiorange - Service accounts are commonly used in which environment?
a. Cloud-native microservices only
b. Windows, Linux, and application servers for automated processes
c. Physical access control systems only
d. User-facing endpoints exclusively
Answer: b. Windows, Linux, and application servers for automated processesminiorange - What critical step is required for managing shared service accounts?
a. Remove all default passwords
b. Group and synchronize credential changes for all assets using these accounts
c. Assign additional local admin rights
d. Exempt them from security policies
Answer: b. Group and synchronize credential changes for all assets using these accountsminiorange - Which account is considered most critical to limit due to potential organizational risk?
a. Standard user account
b. Domain administrator account
c. Guest account
d. Temporary user account
Answer: b. Domain administrator accountminiorange - Why should unique passwords be used for privileged user accounts on endpoints?
a. To enable anonymous access
b. To facilitate shared responsibility
c. To reduce risk from password duplication across devices
d. To make IT support easier
Answer: c. To reduce risk from password duplication across devicesminiorange - What do application service accounts often require to perform their function?
a. Frequent password changes only
b. Elevated privileges
c. User-level permissions only
d. No permissions
Answer: b. Elevated privilegesminiorange - What is a common management action for emergency (break glass) accounts?
a. Assign to all new hires by default
b. Disable outside of emergencies and restrict with time limits
c. Use for all remote logins
d. Enable multifactor for guests
Answer: b. Disable outside of emergencies and restrict with time limitsminiorange - What identifies a system account?
a. Used for normal user logins
b. Operates for the system’s core processes and tasks
c. Used for web-based access only
d. Shared by all users
Answer: b. Operates for the system’s core processes and tasksssh+1 - What is the main purpose of auditing privileged account activities?
a. Compliance checking and threat detection
b. Hardware optimization
c. Document formatting
d. Enabling silent logins
Answer: a. Compliance checking and threat detectionssh+1 - Which policy should apply to Application Service Accounts for minimum risk?
a. Maximum possible privileges
b. Strict lease privilege and regular credential review
c. Unrestricted network access
d. Open to all partners
Answer: b. Strict lease privilege and regular credential reviewminiorange - How does PAM support regulatory compliance?
a. By limiting software updates
b. By ensuring strict controls and monitoring over sensitive accounts
c. By encrypting all database records
d. By granting all users admin rights
Answer: b. By ensuring strict controls and monitoring over sensitive accountsminiorange - Which privileged accounts are often targeted first by attackers?
a. General user accounts
b. Privileged and admin accounts
c. Guest accounts
d. Non-user accounts
Answer: b. Privileged and admin accountsssh+1 - The principle of least privilege refers to:
a. Assigning users the minimum rights needed for their role
b. Granting all users admin privileges
c. Giving administrators no special rights
d. Allowing shared credentials
Answer: a. Assigning users the minimum rights needed for their roleminiorange - Why are service accounts challenging to manage securely?
a. Their credentials rarely change and may be shared
b. Only used for guest logins
c. They are always time-bound
d. They can’t be monitored
Answer: a. Their credentials rarely change and may be sharedminiorange - Which account should be monitored most strictly in any IT environment?
a. Inactive accounts
b. Privileged accounts
c. End-user accounts
d. Temporary accounts
Answer: b. Privileged accountsssh+1 - How do system accounts differ from user accounts?
a. System accounts are for people only
b. User accounts only access operating system kernels
c. System accounts manage system-level tasks and aren’t tied to individuals
d. System accounts require guest passwords
Answer: c. System accounts manage system-level tasks and aren’t tied to individualsminiorange - What is a key requirement of privileged access management tools?
a. Allowing password reuse
b. Centralizing, securing, and monitoring privileged accounts
c. Bypassing authentication
d. Removing logging requirements
Answer: b. Centralizing, securing, and monitoring privileged accountsssh+1 - Emergency accounts are also known as:
a. Hidden accounts
b. Break glass accounts
c. Shadow admin accounts
d. Legacy access accounts
Answer: b. Break glass accountsminiorange - Why do application accounts require strict privilege assignments?
a. To ensure end-users have access
b. Because they operate autonomously and can be exploited if over-permissioned
c. To support frequent password resets
d. To allow for last-minute access changes
Answer: b. Because they operate autonomously and can be exploited if over-permissionedminiorange - Which account is generally disabled by default on secure systems?
a. Root account
b. Guest account
c. Application account
d. Privileged user account
Answer: b. Guest accountssh - What is an example of a non-user account in identity management?
a. Service account
b. Employee account
c. Partner account
d. End-user account
Answer: a. Service accountssh - The effectiveness of privileged account controls is maximized when:
a. No monitoring is in place
b. Access is not logged
c. Monitoring and auditing are continuously enforced
d. All accounts are left with default passwords
Answer: c. Monitoring and auditing are continuously enforcedssh+1 - What happens if application service accounts are not regularly audited?
a. Nothing, if other controls exist
b. They might accumulate excessive privileges and introduce security risks
c. System performance increases
d. Database speed improves
Answer: b. They might accumulate excessive privileges and introduce security risksminiorange - Service accounts can be secured by:
a. Regular password rotation and credential management policies
b. Using shared admin passwords
c. Disabling audit logs
d. Removing multifactor authentication
Answer: a. Regular password rotation and credential management policiesminiorange - Which of the following is NOT a recommended management step for privileged accounts?
a. Enforce least privilege access
b. Regularly audit account activities
c. Use default, never-changing passwords
d. Use strong authentication and monitoring
Answer: c. Use default, never-changing passwordsssh+1
