CERTIFIED-IN-CYBERSECURITY · Question #191
What process should the company undertake to verify that an employee has the necessary privileges, considering their roles in HR, payroll, and customer service?
The correct answer is A. Account review. An account review is the process of auditing user accounts to ensure that assigned privileges align with an employee's current roles and responsibilities. When an employee holds multiple roles (HR, payroll, customer service), an account review checks that their access rights…
Question
What process should the company undertake to verify that an employee has the necessary privileges, considering their roles in HR, payroll, and customer service?
Options
- AAccount review
- BRe-provisioning
- CPrivilege creep
- DAccount revocation
How the community answered
(35 responses)- A91% (32)
- B3% (1)
- C6% (2)
Explanation
An account review is the process of auditing user accounts to ensure that assigned privileges align with an employee's current roles and responsibilities. When an employee holds multiple roles (HR, payroll, customer service), an account review checks that their access rights are appropriate and not excessive. This helps detect 'privilege creep' (gradual accumulation of unnecessary permissions) and enforces the principle of least privilege. Re-provisioning means assigning new access rights, privilege creep describes the problem itself, and account revocation removes access entirely - none of these describe the verification process.
Topics
Community Discussion
No community discussion yet for this question.