Which of the following scenarios would most likely indicate an account with unnecessary access privileges, as identified by a CIEM solution?

A Cloud Infrastructure Entitlement Management (CIEM) solution is designed to enforce the principle of least privilege by continuously analyzing granted permissions against actual usage. The scenario of a developer account holding high-risk write permissions to a production database, which has not been used for an extended period (six months), is a classic indicator of a dormant and unnecessary privilege. This combination of excessive permission and inactivity creates a significant security risk and a prime target for remediation. CIEM tools specifically identify such unused or "stale" entitlements to help organizations reduce their attack surface by revoking access that is not required for the account's function.

B. This describes a successfully remediated state where a privilege has already been revoked, not an existing unnecessary privilege.
C. This account has high privileges, but they are necessary and actively used for its administrative function, aligning with its intended purpose.
D. This scenario exemplifies the principle of least privilege being correctly applied, granting only the necessary read-only access for a specific function.

1. CrowdStrike. (2023). CrowdStrike Falcon Cloud Security Datasheet. CrowdStrike, Inc. Page 2, "Cloud Infrastructure Entitlement Management (CIEM)" section. The document states that Falcon Cloud Security provides CIEM to "discover and remediate excessive and unused permissions across your cloud infrastructure." This directly supports identifying unused access as a key function.

2. Parducci, D., & N. R. Z. Voellm. (2022). Cloud Security and Privacy. Stanford University, CS 155: Computer and Network Security, Lecture 19, Slide 28 ("Least Privilege"). The lecture notes emphasize that a core tenet of cloud security is granting only the permissions required and auditing for unused privileges, as "standing privileges are a liability."

3. National Institute of Standards and Technology (NIST). (2021). NIST Special Publication 800-53, Revision 5: Security and Privacy Controls for Information Systems and Organizations. Section AC-2, "Account Management," and AC-6, "Least Privilege." These controls mandate reviewing accounts for inactivity and enforcing the principle of least privilege, which includes removing unnecessary access rights—a process automated by CIEM solutions.