Identity and Access Management
Question #256
A software development organization is running multiple cloud-based projects in parallel. Different teams and roles require access to different cloud resources, and team assignments change frequently. Which approach BEST enforces the principles of least privilege and need-to-know while still enabling efficient collaboration and project delivery?
A. Grant all developers broad access to all cloud resources to eliminate workflow delays
B. Deploy a centralized access management solution that automatically adjusts permissions based on roles and active project assignments
C. Designate a superuser in each team to manually assign cloud permissions to team members
D. Require developers to submit manual access requests for cloud resources whenever access is needed
Domain Concept: Identity and Access Management
This scenario evaluates management-level decision making in Identity and Access Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.