CWNP CWISA-102 Exam - Topic 2 Question 5 Discussion

Actual exam question for CWNP's CWISA-102 exam

Question #: 5
Topic #: 2

You must ensure proper security controls are in place for a wireless solution. The solution allows for the use of groups to grant access to resources and capabilities. What is the term used to describe a situation where an individual is granted more access than required because of inclusion in a group?

AImproper delegation

BPrivilege escalation

CPrivilege creep

DImproper grouping

Show Suggested Answer

Suggested Answer: C

Privilege Creep Defined:Gradual accumulation of excessive permissions over time, often due to users changing roles or access needs not being adjusted accordingly.

Other Terms:

Privilege Escalation: A malicious act of obtaining higher-than-authorized access.

Improper Delegation/Grouping: Faulty permission assignment, but not the gradual accretion aspect.

References:

Principle of Least Privilege:Security best practice emphasizing the need to minimize access to only what's necessary.

Access Control Models:Discussions of how privilege creep can violate security principles.

by Tijuana at Apr 22, 2024, 09:59 PM

Limited Time Offer

25%

Off

Get Premium CWISA-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tiffiny

6 months ago

Sounds a bit off, how can someone have too much access just from a group?

upvoted 0 times

...

Devon

6 months ago

Wait, are we sure it's not improper delegation?

upvoted 0 times

...

Isreal

6 months ago

Totally agree, privilege creep is the right term.

upvoted 0 times

...

Vivan

7 months ago

I thought it was privilege escalation?

upvoted 0 times

...

Quiana

7 months ago

It's definitely called privilege creep!

upvoted 0 times

...

Gerald

7 months ago

I’m leaning towards "privilege creep" too. We had a similar question on the last quiz about access rights and groups.

upvoted 0 times

...

Jacquelyne

7 months ago

I feel like "improper delegation" could fit, but it doesn't quite match the group context. I might be mixing it up with something else.

upvoted 0 times

...

German

7 months ago

I remember discussing privilege escalation in class, but that seems more about gaining unauthorized access rather than just being in a group.

upvoted 0 times

...

Avery

8 months ago

I think the term might be "privilege creep," but I'm not entirely sure. It sounds familiar from our last practice session.

upvoted 0 times

...

Adell

8 months ago

Okay, let me think this through step-by-step. The question is asking about a situation where someone gets more access than required due to being in a group. I believe the term for that is "Privilege creep". I'm fairly confident that's the right answer.

upvoted 0 times

...

Viola

8 months ago

Ah, I remember learning about this in class. I think the correct term is "Privilege escalation" - that's when someone gains more permissions than they should have through their group membership.

upvoted 0 times

...

Deonna

8 months ago

Hmm, I'm a little unsure about this one. I know it has something to do with access control and groups, but I can't quite remember the specific term. I'll have to think this through carefully.

upvoted 0 times

...

Maddie

8 months ago

This one seems pretty straightforward. I'm pretty sure the answer is "Privilege creep" since that's the term used to describe when someone gets more access than they need due to group membership.

upvoted 0 times

...

Tabetha

8 months ago

Okay, I think I've got a handle on this. I just need to analyze each answer choice and determine which one is not correct based on the information provided in the exhibit.

upvoted 0 times

...

Lorean

8 months ago

Hmm, I'm a little unsure about this one. I'll have to think it through carefully. Maybe I should review my notes on collateral adjustments.

upvoted 0 times

...

Herminia

8 months ago

Hmm, I'm a bit unsure about the differences between fixed-price and firm fixed-price. I'll need to think through the nuances to select the right answer.

upvoted 0 times

...

Lovetta

8 months ago

I've got a good handle on this. The key is to focus on the physical coverage area, the number of users, and the capacity needs. Those are the main drivers for determining the right number of APs.

upvoted 0 times

...

Truman

8 months ago

Okay, let's see. The key is to carefully examine the details of each alternative plan and match them to the definitions of spin-offs and carve-outs. I think I can work through this systematically.

upvoted 0 times

...