ABC company has a lot of contractors working for them. The provisioning team does not always get notified that a contractor has left the company. Which of the following policies would prevent…

The correct answer is B. Account expiration policy. An Account Expiration Policy automatically disables an account on a predefined date, making it ideal for contractors who have known end dates. Since it is automated, it does not depend on the provisioning team being notified when a contractor leaves - the account simply expires…

Security operations

Question

ABC company has a lot of contractors working for them. The provisioning team does not always get notified that a contractor has left the company. Which of the following policies would prevent contractors from having access to systems in the event a contractor has left?

Options

AAnnual account review
BAccount expiration policy
CAccount lockout policy
DAccount disablement

How the community answered

(28 responses)

A
4% (1)
B
89% (25)
C
7% (2)

Explanation

An Account Expiration Policy automatically disables an account on a predefined date, making it ideal for contractors who have known end dates. Since it is automated, it does not depend on the provisioning team being notified when a contractor leaves - the account simply expires as scheduled. An annual account review (A) only catches issues once a year, leaving accounts active too long. Account lockout (C) triggers after failed login attempts, not based on employment status. Account disablement (D) is a reactive manual action, still requiring notification, whereas expiration is proactive and automatic.

Topics

#account expiration#access control#identity management#contractor access

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice