MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is a primary security risk associated with shared accounts in cybersecurity?
a. Increased password complexity
b. Inability to enforce multi-factor authentication
c. Lack of individual accountability and auditability
d. Reduced system performance
Answer: c. Lack of individual accountability and auditabilitytechdocs.broadcom+1
According to ISO 27001, what is a recommended control for managing shared accounts?
a. Disabling all shared accounts permanently
b. Implementing role-based access control (RBAC)
c. Using simple passwords for ease of access
d. Allowing unlimited access to all employees
Answer: b. Implementing role-based access control (RBAC)beyondtrust+1
Which of the following best describes a shared account?
a. An account assigned exclusively to one user
b. An account used by multiple individuals with the same credentials
c. A guest account with time-limited access
d. A service account with automated login
Answer: b. An account used by multiple individuals with the same credentialskrontech+1
Why is monitoring important for shared accounts?
a. To increase login speed
b. To track individual user actions and detect anomalies
c. To reduce the need for passwords
d. To allow unrestricted access
Answer: b. To track individual user actions and detect anomaliesitgov-docs+1
What is a recommended method to secure shared account passwords?
a. Writing them on sticky notes
b. Sharing them via email
c. Storing them in an encrypted password manager
d. Using the same password for all accounts
Answer: c. Storing them in an encrypted password manageridentitymanagementinstitute+1
Which compliance standard requires that access be traceable to individual users, making shared accounts problematic?
a. GDPR
b. CMMC
c. ISO 9001
d. COBIT
Answer: b. CMMCencomputers+1
What is a key benefit of using multi-factor authentication (MFA) with shared accounts?
a. Eliminates the need for passwords
b. Ensures only one person can access the account
c. Adds an extra layer of security even if the password is compromised
d. Reduces the need for monitoring
Answer: c. Adds an extra layer of security even if the password is compromisedinstasafe+1
What does session monitoring of shared accounts enable?
a. Faster login times
b. Real-time recording and playback of user activities
c. Automatic password generation
d. Removal of access logs
Answer: b. Real-time recording and playback of user activitiesbeyondtrust+1
Which of the following is a best practice for managing shared accounts?
a. Never changing the password
b. Assigning the account to a specific team or role
c. Sharing credentials verbally
d. Using default usernames like “admin”
Answer: b. Assigning the account to a specific team or roleitgov-docs+1
What risk is increased when multiple users know the password to a shared account?
a. Reduced phishing attempts
b. Lower chance of data breach
c. Higher exposure to social engineering attacks
d. Improved audit accuracy
Answer: c. Higher exposure to social engineering attacksidentitymanagementinstitute+1
What should organizations do to minimize the number of shared accounts?
a. Create one for every employee
b. Use them only when absolutely necessary
c. Share them across departments freely
d. Avoid auditing them
Answer: b. Use them only when absolutely necessarykrontech+1
Which tool can help securely store and manage shared account credentials?
a. Text editor
b. Spreadsheet file
c. Encrypted password manager
d. Public cloud storage
Answer: c. Encrypted password manageridentitymanagementinstitute+1
What is a major drawback of shared accounts regarding compliance?
a. They simplify reporting
b. They enhance transparency
c. They hinder individual accountability
d. They reduce audit frequency
Answer: c. They hinder individual accountabilitytechdocs.broadcom+1
How can organizations ensure accountability in shared accounts?
a. By disabling logging
b. By using individual user IDs in conjunction with shared access
c. By allowing password sharing via chat
d. By avoiding MFA
Answer: b. By using individual user IDs in conjunction with shared accessencomputers+1
What is a recommended frequency for reviewing access to shared accounts?
a. Once every five years
b. Only after a breach
c. Regularly, such as quarterly or annually
d. Never, if MFA is used
Answer: c. Regularly, such as quarterly or annuallyinstasafe+1
Which of the following is a secure method for two-factor authentication in shared accounts?
a. SMS codes sent to a personal phone
b. Shared email for code delivery
c. Hardware security keys
d. Security questions with public answers
Answer: c. Hardware security keysinstasafe+1
What is the purpose of conducting regular audits on shared accounts?
a. To increase user convenience
b. To verify access permissions and detect unauthorized activity
c. To reduce password complexity
d. To eliminate the need for MFA
Answer: b. To verify access permissions and detect unauthorized activitybeyondtrust+1
What does the principle of least privilege mean in the context of shared accounts?
a. Granting full access to all users
b. Providing only the minimum access necessary for job functions
c. Sharing passwords with all team members
d. Avoiding any access controls
Answer: b. Providing only the minimum access necessary for job functionssegura+1
Why are default privileged accounts like “root” or “Administrator” risky when shared?
a. They are automatically secure
b. They cannot be monitored
c. They lack individual accountability and are common attack targets
d. They are immune to password guessing
Answer: c. They lack individual accountability and are common attack targetscisecurity+1
What is a potential consequence of a disgruntled employee having access to a shared account?
a. Improved system performance
b. Account takeover and data manipulation
c. Automatic password reset
d. Enhanced security logging
Answer: b. Account takeover and data manipulationtechdocs.broadcom+1
Which regulation mandates logging and traceability of user access, conflicting with shared accounts?
a. HIPAA
b. PCI DSS
c. FISMA
d. All of the above
Answer: d. All of the aboveitgov-docs+1
What is a recommended practice when a user leaves an organization and had access to a shared account?
a. Do nothing if MFA is enabled
b. Change the password and revoke access
c. Share the new password via email
d. Keep the account active for emergencies
Answer: b. Change the password and revoke accessinstasafe+1
How can organizations reduce the risk of credential stuffing attacks on shared accounts?
a. Use the same password across platforms
b. Implement MFA
c. Share passwords over the phone
d. Avoid logging access
Answer: b. Implement MFAitgov-docs+1
What is a key feature of a privileged access management (PAM) solution for shared accounts?
a. Eliminates the need for passwords
b. Provides secure storage, session monitoring, and audit trails
c. Allows unlimited access to all users
d. Disables all logging for privacy
Answer: b. Provides secure storage, session monitoring, and audit trailsbeyondtrust+1
Which of the following is NOT a recommended authentication method for shared accounts?
a. FIDO2 security keys
b. Biometric verification
c. SMS-based one-time codes
d. Authenticator apps
Answer: c. SMS-based one-time codesinstasafe+1
What should be included in an incident response plan for shared accounts?
a. Procedures for reporting and isolating compromised accounts
b. Instructions to ignore minor breaches
c. A list of all shared passwords
d. Guidelines for sharing credentials during emergencies
Answer: a. Procedures for reporting and isolating compromised accountsitgov-docs+1
Why is user training important for shared account security?
a. To encourage password sharing
b. To reduce the need for MFA
c. To promote awareness of security risks and best practices
d. To eliminate audits
Answer: c. To promote awareness of security risks and best practicesmortgagecadence+1
What is a common use case for shared accounts that still requires strict controls?
a. Personal email access
b. Social media management by a marketing team
c. Individual file storage
d. Private messaging
Answer: b. Social media management by a marketing teamidentitymanagementinstitute+1
What does “discovery and profiling” mean in shared account management?
a. Ignoring unknown accounts
b. Identifying and bringing all shared and service accounts under management
c. Deleting all administrative accounts
d. Avoiding inventory updates
Answer: b. Identifying and bringing all shared and service accounts under managementtechdocs.broadcom+1
Which of the following enhances accountability in shared account usage?
a. Anonymous login
b. Individual user identification during access
c. Shared session tokens
d. Disabling logs
Answer: b. Individual user identification during accessencomputers+1
What is a risk of using shared email accounts?
a. Improved spam filtering
b. Difficulty attributing sent messages to individuals
c. Faster inbox sorting
d. Enhanced encryption
Answer: b. Difficulty attributing sent messages to individualsdmarcreport+1
How can organizations enforce strong password policies for shared accounts?
a. Use “password123” for memorability
b. Require complex, long passwords changed periodically
c. Share passwords in team chats
d. Avoid password managers
Answer: b. Require complex, long passwords changed periodicallyidentitymanagementinstitute+1
What is the role of a hardened appliance in privileged account management?
a. To increase system vulnerabilities
b. To provide a secure, centralized platform for managing shared credentials
c. To allow unrestricted access
d. To disable all security controls
Answer: b. To provide a secure, centralized platform for managing shared credentialsbeyondtrust+1
Which of the following is a secure way to distribute MFA codes for a shared account?
a. Publicly posting them
b. Sending to a shared, monitored email or using a shared authenticator app
c. Announcing them in meetings
d. Saving in a public document
Answer: b. Sending to a shared, monitored email or using a shared authenticator appidentitymanagementinstitute+1
What is a benefit of using role-based access control with shared accounts?
a. Grants all users admin rights
b. Limits access based on job responsibilities
c. Eliminates the need for passwords
d. Reduces monitoring needs
Answer: b. Limits access based on job responsibilitiessegura+1
Why is it important to disable unused default accounts?
a. They improve system performance
b. They are not a security concern
c. They reduce the attack surface and prevent unauthorized access
d. They enhance logging capabilities
Answer: c. They reduce the attack surface and prevent unauthorized accesstenable+1
What does “session playback” allow administrators to do?
a. Speed up user sessions
b. Review recorded actions for audit and forensic purposes
c. Hide user activities
d. Bypass authentication
Answer: b. Review recorded actions for audit and forensic purposestechdocs.broadcom+1
Which standard explicitly discourages the use of shared user accounts?
a. NIST SP 800-53 AC-2
b. ISO 27001
c. CIS Controls
d. All of the above
Answer: d. All of the abovecsf+2
What is a key objective of implementing MFA for shared accounts?
a. To make login more convenient
b. To reduce the risk of unauthorized access even if credentials are compromised
c. To eliminate the need for monitoring
d. To allow password reuse
Answer: b. To reduce the risk of unauthorized access even if credentials are compromisedinstasafe+1
How can organizations ensure secure access to shared accounts without disrupting workflows?
a. By using standard desktop tools integrated with PAM solutions
b. By avoiding any security controls
c. By sharing passwords verbally
d. By disabling all logs
Answer: a. By using standard desktop tools integrated with PAM solutionslearn.microsoft+1
What is a recommended practice for password changes in shared accounts?
a. Never change the password
b. Change it only when a breach is suspected
c. Change it regularly and update all authorized users securely
d. Share the new password in a public channel
Answer: c. Change it regularly and update all authorized users securelyitgov-docs+1
Which of the following increases the attack surface for shared accounts?
a. Using strong passwords
b. Enabling MFA
c. Allowing unnecessary users to have access
d. Regular audits
Answer: c. Allowing unnecessary users to have accesssegura+1
What is the primary reason shared accounts are discouraged in high-security environments?
a. They reduce administrative overhead
b. They compromise individual accountability and traceability
c. They improve system speed
d. They enhance user experience
Answer: b. They compromise individual accountability and traceabilityencomputers+1
What should be done if a shared account password is suspected to be compromised?
a. Ignore it if MFA is enabled
b. Immediately change the password and investigate access logs
c. Share the incident on social media
d. Wait for the next audit
Answer: b. Immediately change the password and investigate access logsinstasafe+1
Which of the following is a secure alternative to shared accounts?
a. Individual accounts with role-based permissions
b. Publicly accessible accounts
c. Default accounts with known passwords
d. Accounts without passwords
Answer: a. Individual accounts with role-based permissionssegura+1
What is the purpose of a single pane-of-glass in shared account management?
a. To hide user activities
b. To centralize monitoring, reporting, and analytics
c. To increase system complexity
d. To disable security alerts
Answer: b. To centralize monitoring, reporting, and analyticsbeyondtrust+1
Why is it important to educate users about shared account risks?
a. To encourage more sharing
b. To reduce compliance requirements
c. To foster a culture of security and accountability
d. To eliminate the need for technology controls
Answer: c. To foster a culture of security and accountabilitymortgagecadence+1
What does “privileged session management” involve?
a. Allowing unlimited access
b. Recording, monitoring, and auditing privileged user sessions
c. Disabling all logs
d. Sharing session tokens
Answer: b. Recording, monitoring, and auditing privileged user sessionstechdocs.broadcom+1
Which of the following best describes Team Passwords in PAM solutions?
a. Unsecured spreadsheets
b. Publicly shared documents
c. Secure, auditable storage for group-owned credentials
d. Verbal sharing of passwords
Answer: c. Secure, auditable storage for group-owned credentialsbeyondtrust+1
What is a long-term strategy to minimize reliance on shared accounts?
a. Increasing the number of shared accounts
b. Implementing individual user accounts with appropriate access controls
c. Avoiding all forms of authentication
d. Disabling all security policies
Answer: b. Implementing individual user accounts with appropriate access controlssegura+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info