Security & Access Control Flashcards

In a tag management system, why is restricting publish permissions important?

Answer: Unauthorized tag changes can inject malicious code or break tracking

Publishing a bad tag can expose data or run malicious scripts on every page.

What is a Content Security Policy (CSP) used for in relation to analytics scripts?

Answer: Defining which script sources the browser may load

CSP restricts allowed script origins, so analytics domains must be explicitly permitted.

Which Single Sign-On benefit most helps analytics administration?

Answer: Centralized access control and deprovisioning

SSO ties access to the identity provider so removing a user there removes tool access.

What does role-based access control (RBAC) assign permissions to?

Answer: Roles that users are placed into

RBAC grants permissions to roles, and users inherit them by membership.

Why should analytics API keys and service account credentials never be committed to public code repositories?

Answer: Anyone could use them to access or extract data

Exposed credentials let attackers pull data or modify configuration.

A periodic review of who has access to analytics properties is called what?

Answer: User access review

Access reviews catch stale or excessive permissions.

What is the risk of granting 'Administrator' access to every marketing team member?

Answer: Accidental or unauthorized configuration changes and data deletion

Excess admin rights increase chance of misconfiguration and data loss.