hard20 pts · first answer countsidentity-securityentra-idaccess-control
A dynamic group that anyone can join
A dynamic group used to grant access to an internal finance app has the rule user.department -eq "Finance". Users can edit their own department field through an HR self-service portal that syncs to Entra ID. What is the risk?
Discussion 0
Join free to post in the discussion.
Related questions
- Applying least privilegeCybersecurity Analyst
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Entra sign-in logs vs audit logsCybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst