What are some key elements of Access Governance? There are 2 correct answers to this question.

Question

Options

• AMonitoring Privileges
• BBusiness Role Management
• CCertify Authorizations
• DAccess Request Management

• A
  96% (27)
• B
  4% (1)

Explanation

Monitoring Privileges (A) and Certify Authorizations (C) are correct because Access Governance centers on two core activities: continuously watching who holds elevated or sensitive access rights (monitoring), and periodically reviewing and formally approving that those rights are still appropriate (certification/recertification). Together, these ensure ongoing visibility and accountability over access.

B (Business Role Management) is wrong because managing roles is a prerequisite activity that feeds into governance - it belongs to Role Management or Identity Administration, not Access Governance itself.

D (Access Request Management) is wrong because handling requests for new or changed access is a provisioning/workflow process, not a governance control - it answers "grant access," while governance asks "is this access still valid?"

Memory tip: Think of Access Governance as a watchdog function - it watches (monitors privileges) and judges (certifies authorizations). Anything that grants or structures access (requests, roles) falls outside its scope.

No community discussion yet for this question.