CV0-003 · Question #264
Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?
The correct answer is A. Have the user contact the cloud systems administrator to disable the account when it is no longer. The key phrase in the question is 'as soon as they no longer need to be active.' Option A - having the user contact the administrator directly - is the most immediate trigger because it happens the moment the user determines the account is no longer needed, regardless of the…
Question
Which of the following is the BEST way to ensure accounts in a cloud environment are disabled as soon as they no longer need to be active?
Options
- AHave the user contact the cloud systems administrator to disable the account when it is no longer
- BWhen users leave the company, ensure an account disablement request is initiated and will be
- CHave accounts checked by the cloud systems administrator once per day to ensure active
- DReboot directory services servers once a day to ensure all account disablement requests are
How the community answered
(30 responses)- A90% (27)
- B3% (1)
- C7% (2)
Explanation
The key phrase in the question is 'as soon as they no longer need to be active.' Option A - having the user contact the administrator directly - is the most immediate trigger because it happens the moment the user determines the account is no longer needed, regardless of the reason (project completion, role change, contract end, etc.). Option B only covers the specific scenario of employees leaving the company and depends on an HR-driven offboarding workflow, which may have delays. Option C introduces up to a 24-hour window of exposure because checks only happen once per day. Option D - rebooting directory services servers daily - has no logical relationship to account disablement and would be disruptive without solving the problem.
Topics
Community Discussion
No community discussion yet for this question.