A security analyst implemented group-based privileges within the company active directory. Which of the following account management techniques should be undertaken regularly to ensure least…

Question

Options

• ALeverage role-based access controls.
• BPerform user group clean-up.
• CVerify smart card access controls.
• DVerify SHA-256 for password hashes.

• A
  4% (1)
• B
  85% (22)
• C
  8% (2)
• D
  4% (1)

Explanation

Performing user group clean-up is the correct answer because least privilege requires that users retain only the access they currently need. Over time, employees change roles, leave the company, or accumulate group memberships from past projects. Regularly auditing and cleaning up group memberships removes stale or excessive permissions, ensuring no user retains more access than their current role demands. Option A (role-based access controls) is already in place as the premise describes group-based privileges. Option C (smart card access controls) relates to authentication, not authorization auditing. Option D (SHA-256 for password hashes) is a cryptographic concern unrelated to group membership cleanup.

No community discussion yet for this question.