SY0-501 · Question #513
A business sector is highly competitive, and safeguarding trade secrets and critical information is paramount. On a seasonal basis, an organization employs temporary hires and contractor personnel…
The correct answer is D. Employ an account expiration strategy. For temporary and contract personnel, employing an account expiration strategy is the most effective way to manage access, ensuring accounts are automatically deactivated when their legitimate need ends, which protects sensitive information.
Question
A business sector is highly competitive, and safeguarding trade secrets and critical information is paramount. On a seasonal basis, an organization employs temporary hires and contractor personnel to accomplish its mission objectives. The temporary and contract personnel require access to network resources only when on the clock. Which of the following account management practices are the BEST ways to manage these accounts?
Options
- AEmploy time-of-day restrictions.
- BEmploy password complexity.
- CEmploy a random key generator strategy.
- DEmploy an account expiration strategy.
- EEmploy a password lockout policy.
How the community answered
(26 responses)- B4% (1)
- C8% (2)
- D73% (19)
- E15% (4)
Why each option
For temporary and contract personnel, employing an account expiration strategy is the most effective way to manage access, ensuring accounts are automatically deactivated when their legitimate need ends, which protects sensitive information.
While time-of-day restrictions are valuable for limiting access to specific working hours, they do not manage the overall lifecycle of temporary accounts or automatically deprovision them once the temporary assignment is complete.
Password complexity is a general security measure for all accounts but does not address the specific requirement for managing the temporary nature or time-bound access periods of seasonal personnel.
A random key generator strategy primarily focuses on creating strong credentials or cryptographic keys and does not provide a mechanism for managing the duration of account access for temporary employees.
Employing an account expiration strategy ensures that accounts for temporary and contract personnel are automatically disabled or removed once their assignment or contract concludes. This directly addresses the 'seasonal basis' and 'temporary hires' scenario by preventing lingering access to sensitive network resources after their legitimate need has ended, which is crucial for safeguarding trade secrets.
A password lockout policy is a defense against brute-force attacks but does not control the timeframe an account remains active or restrict access to specific working periods for temporary personnel.
Concept tested: Temporary user account lifecycle management
Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/user-accounts
Topics
Community Discussion
No community discussion yet for this question.