An employee of a retail company has been granted an extended leave of absence by Human Resources (HR). This information has been formally communicated to the access provisioning team. Which of the fol

Temporarily revoking access disables the account while retaining it intact, which aligns with least privilege and account lifecycle management principles. This ensures the employee cannot access systems during their absence (reducing attack surface), while allowing seamless re-provisioning when they return. It is the most proportionate and reversible response to a known, HR-approved temporary absence.

Deleting the user account after six months is an overly destructive action that would require full re-provisioning upon return and may violate organizational policy for a formally approved leave, making it inappropriate as an immediate best action.

Blocking only physical office access ignores logical/digital access controls, leaving the employee's system accounts, VPN, and application access active, which fails to fully address the security risk of an extended absence.

Merely monitoring the account does not enforce least privilege or reduce the attack surface; an unused but active account during an extended absence remains a viable target for unauthorized access or credential compromise.