CISSP · Question #559
Which of the following is the final phase of the identity and access provisioning lifecycle?
The correct answer is B. Revocation. Revocation is the final phase of the identity and access provisioning lifecycle. The identity and access provisioning lifecycle is the set of activities and stages that govern the creation, modification, and deletion of user accounts and access privileges in an organization. The
Question
Which of the following is the final phase of the identity and access provisioning lifecycle?
Options
- ARecertification
- BRevocation
- CRemoval
- DValidation
How the community answered
(37 responses)- A3% (1)
- B89% (33)
- C5% (2)
- D3% (1)
Explanation
Revocation is the final phase of the identity and access provisioning lifecycle. The identity and access provisioning lifecycle is the set of activities and stages that govern the creation, modification, and deletion of user accounts and access privileges in an organization. The identity and access provisioning lifecycle consists of six phases: request, approval, provision, test, review, and audit. Revocation is the process of terminating or disabling the user accounts and access privileges when they are no longer needed, used, or authorized, such as when a user leaves the organization, changes roles, or violates the policies. Revocation can be done manually or automatically, depending on the triggers and the mechanisms used. Revocation ensures that the user accounts and access privileges are removed in a timely and secure manner, and that the principle of least privilege and the separation of duties are maintained.
Topics
Community Discussion
No community discussion yet for this question.