nerdexam
CompTIA

CV0-002 · Question #29

A cloud administrator is adding several accounts for new development team interns. These interns will need access to some, but not all, of the resources and will only be working over the summer…

The correct answer is C. Create one template user account with the appropriate permissions and use it to clone the other. To efficiently provision multiple temporary accounts with similar permissions, a cloud administrator should create a template user account, clone it for each intern, and then set individual expiration dates.

Security

Question

A cloud administrator is adding several accounts for new development team interns. These interns will need access to some, but not all, of the resources and will only be working over the summer. Which of the following user provisioning techniques should be used?

Options

  • ACreate a single account for the interns to share. Set the expiration date for the account to six
  • BCreate a role labeled "interns" with the appropriate permissions. Create a separate account with
  • CCreate one template user account with the appropriate permissions and use it to clone the other
  • DCreate individual accounts for each intern, set the permissions and expiration date for each

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    15% (4)
  • C
    74% (20)
  • D
    7% (2)

Why each option

To efficiently provision multiple temporary accounts with similar permissions, a cloud administrator should create a template user account, clone it for each intern, and then set individual expiration dates.

ACreate a single account for the interns to share. Set the expiration date for the account to six

Creating a single shared account is a poor security practice, as it eliminates individual accountability and makes auditing impossible.

BCreate a role labeled "interns" with the appropriate permissions. Create a separate account with

While creating a role is essential for managing permissions (RBAC), this choice describes an incomplete account creation process and doesn't specify an efficient technique for provisioning 'several accounts'.

CCreate one template user account with the appropriate permissions and use it to clone the otherCorrect

Creating a template user account with appropriate permissions allows for consistent and efficient bulk provisioning of 'several accounts' by cloning, after which individual settings like expiration dates can be applied for each intern.

DCreate individual accounts for each intern, set the permissions and expiration date for each

Creating individual accounts manually for each intern is less efficient for 'several accounts' compared to using a template or cloning technique.

Concept tested: User provisioning techniques, efficiency, and security

Source: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/concept-provisioning-on-demand

Topics

#user provisioning#identity management#RBAC#account lifecycle

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CV0-002 Practice