2 Accounts and Permissions Free Online FlashCards

What does a user account represent?

A user account represents a person or service that can sign in to a device, application, or network.

What is a standard account intended for?

A standard account is intended for everyday tasks such as browsing the web, using email, and working with documents.

Why assign permissions through groups?

Permissions can be assigned to groups, making access easier to manage for multiple accounts.

What is the principle of least privilege?

The principle of least privilege gives each person or service only the access needed for its assigned tasks.

What access should a staff member get if they only need to read project files?

Give the staff member read access only; editing or deleting project files is unnecessary for their task.

How do individual accounts improve accountability?

Individual accounts help tie activity to the person who performed it, unlike shared accounts.

What do permissions determine?

Permissions determine what an account can do, such as view or edit files, install software, or change system settings.

What can an administrator account do?

An administrator account can make system-wide changes, such as installing software or changing security settings.

Why should administrator access be limited?

Use administrator access only when needed because it can affect an entire device.

How can Windows UAC control an elevated action?

On Windows, User Account Control (UAC) can request approval or administrator credentials before an action is elevated.

Does least privilege apply to automated services?

Least privilege applies to programs and automated services as well as to people.

What should happen to account and group access over time?

Review account and group access periodically, and remove permissions that are no longer needed.