問題文
A telecoms operator has five administrators who each hold a permanent account with full rights on the core systems. A reviewer proposes issuing elevated rights only for an approved task and only for a limited period. Which risk does that change reduce most directly?
選択肢
- The window during which a stolen or misused administrator credential carries full rights, because outside an approved and time-boxed task the account holds no elevated privilege at all and is no more useful to an attacker than an ordinary one.
- The volume of audit records that the operator has to keep, because elevated sessions will be shorter and the systems will therefore write fewer entries about what the administrators did while they were logged in.
- The need to apply patches to the core systems, because an attacker who cannot obtain elevated rights is unable to exploit a defect in them.
- The chance that an administrator makes a configuration mistake, because every change will now be reviewed by a second administrator before it is applied to any of the core systems that the operator runs for its subscribers across the whole of the region.