nerdexam
CompTIA

SY0-501 · Question #513

A business sector is highly competitive, and safeguarding trade secrets and critical information is paramount. On a seasonal basis, an organization employs temporary hires and contractor personnel…

The correct answer is D. Employ an account expiration strategy. For temporary and contract personnel, employing an account expiration strategy is the most effective way to manage access, ensuring accounts are automatically deactivated when their legitimate need ends, which protects sensitive information.

Submitted by satoshi_tk· Mar 4, 2026Security program management and oversight

Question

A business sector is highly competitive, and safeguarding trade secrets and critical information is paramount. On a seasonal basis, an organization employs temporary hires and contractor personnel to accomplish its mission objectives. The temporary and contract personnel require access to network resources only when on the clock. Which of the following account management practices are the BEST ways to manage these accounts?

Options

  • AEmploy time-of-day restrictions.
  • BEmploy password complexity.
  • CEmploy a random key generator strategy.
  • DEmploy an account expiration strategy.
  • EEmploy a password lockout policy.

How the community answered

(26 responses)
  • B
    4% (1)
  • C
    8% (2)
  • D
    73% (19)
  • E
    15% (4)

Why each option

For temporary and contract personnel, employing an account expiration strategy is the most effective way to manage access, ensuring accounts are automatically deactivated when their legitimate need ends, which protects sensitive information.

AEmploy time-of-day restrictions.

While time-of-day restrictions are valuable for limiting access to specific working hours, they do not manage the overall lifecycle of temporary accounts or automatically deprovision them once the temporary assignment is complete.

BEmploy password complexity.

Password complexity is a general security measure for all accounts but does not address the specific requirement for managing the temporary nature or time-bound access periods of seasonal personnel.

CEmploy a random key generator strategy.

A random key generator strategy primarily focuses on creating strong credentials or cryptographic keys and does not provide a mechanism for managing the duration of account access for temporary employees.

DEmploy an account expiration strategy.Correct

Employing an account expiration strategy ensures that accounts for temporary and contract personnel are automatically disabled or removed once their assignment or contract concludes. This directly addresses the 'seasonal basis' and 'temporary hires' scenario by preventing lingering access to sensitive network resources after their legitimate need has ended, which is crucial for safeguarding trade secrets.

EEmploy a password lockout policy.

A password lockout policy is a defense against brute-force attacks but does not control the timeframe an account remains active or restrict access to specific working periods for temporary personnel.

Concept tested: Temporary user account lifecycle management

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/user-accounts

Topics

#account expiration#temporary accounts#contractor access#identity lifecycle

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice