CV0-002 · Question #481
A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?
The correct answer is D. User account disablement. To immediately revoke a user's access to a SaaS system while preserving their account and data for auditing, disabling the account is the recommended first step.
Question
A customer wants to remove a user's access to the SaaS CRM system. Which of the following methods should be executed FIRST?
Options
- AUser account removal
- BUser account lockout
- CUser account password change
- DUser account disablement
How the community answered
(27 responses)- B7% (2)
- C4% (1)
- D89% (24)
Why each option
To immediately revoke a user's access to a SaaS system while preserving their account and data for auditing, disabling the account is the recommended first step.
User account removal permanently deletes the account and all associated data, which should only be done after ensuring no further need for the account's history or data.
User account lockout prevents further login attempts after a certain number of failed attempts, but it doesn't necessarily revoke active sessions or prevent access if the user's current session is still valid.
User account password change only prevents the user from logging in with the old password, but if the user is already logged in, their session may remain active, and it doesn't immediately revoke all access.
Disabling a user account immediately revokes all access permissions while preserving the account and its associated data or logs for potential future auditing or recovery needs. This is a common best practice before full deletion.
Concept tested: User access revocation best practices
Topics
Community Discussion
No community discussion yet for this question.