nerdexam
(ISC)2

CISSP · Question #887

Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

The correct answer is A. Implement processes for automated removal of access for terminated employees.. When managing user accounts during employee termination, the most effective practice is to automate the process of removing access to ensure that it is done immediately, consistently, and thoroughly across all systems and applications. Automated processes reduce the risk of human

Submitted by haruto_sh· Mar 5, 2026Identity and Access Management

Question

Which of the following is the MOST effective practice in managing user accounts when an employee is terminated?

Options

  • AImplement processes for automated removal of access for terminated employees.
  • BDelete employee network and system IDs upon termination.
  • CManually remove terminated employee user-access to all systems and applications.
  • DDisable terminated employee network ID to remove all access.

How the community answered

(20 responses)
  • A
    70% (14)
  • B
    5% (1)
  • C
    10% (2)
  • D
    15% (3)

Explanation

When managing user accounts during employee termination, the most effective practice is to automate the process of removing access to ensure that it is done immediately, consistently, and thoroughly across all systems and applications. Automated processes reduce the risk of human error, such as forgetting to revoke access to certain systems or applications, and ensure that all accounts associated with the employee are deactivated or deleted quickly after termination. This practice also helps improve compliance with security policies and regulations, especially in environments where the risk of data breaches or unauthorized access is high.

Topics

#User lifecycle management#Account deactivation#Employee termination#Automated provisioning

Community Discussion

No community discussion yet for this question.

Full CISSP Practice