CISSP · Question #299
Which of the following information MUST be provided for user account provisioning?
The correct answer is B. Unique identifier. User account provisioning requires a unique identifier (such as a username or employee ID) to distinguish each account within the system, making it the only mandatory element among the choices.
Question
Which of the following information MUST be provided for user account provisioning?
Options
- AFull name
- BUnique identifier
- CSecurity question
- DDate of birth
How the community answered
(25 responses)- A4% (1)
- B92% (23)
- D4% (1)
Why each option
User account provisioning requires a unique identifier (such as a username or employee ID) to distinguish each account within the system, making it the only mandatory element among the choices.
A full name is commonly collected during provisioning but is not strictly required, as multiple users can share the same name, making it insufficient as a mandatory provisioning element.
A unique identifier (e.g., username, user ID, or employee number) is the fundamental requirement for account provisioning because it ensures each account can be distinctly identified within the identity management system. Without a unique identifier, the system cannot differentiate between users, enforce access controls, or maintain accurate audit trails. This is a core principle of identity and access management (IAM) across all platforms and standards.
Security questions are an optional secondary authentication mechanism and are not a mandatory component of the initial account provisioning process.
Date of birth is personally identifiable information that may be collected for verification purposes but is not a required element for creating and provisioning a user account.
Concept tested: Mandatory requirements for user account provisioning in IAM
Source: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works
Topics
Community Discussion
No community discussion yet for this question.