An employee is leaving the company. The security team must ensure that the employee's access to all systems is removed promptly. Which process should be followed?

Changing the password and keeping the account active

Deprovisioning the account immediately upon termination

Disabling the account after a 30-day grace period

Reviewing the account at the next quarterly audit

Which access control model is best suited for an organization that needs to grant access based on a user's job function, such as 'HR Manager' or 'Network Administrator'?

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

Discretionary Access Control (DAC)

What is the purpose of conducting regular access reviews as part of identity and access governance?

To create new user accounts for all employees on a quarterly basis.

To increase the number of users with administrative access to improve system performance.

To verify that users still have appropriate access rights and to identify and remove excessive permissions.

To ensure that all users have the same access rights to simplify management.

An employee is moving from the sales department to the human resources department. What is the best practice for managing their identity and access?

Keep all existing access and add HR access

Keep the same access and change the job title

Remove all access and then grant HR access from scratch

Wait until the next audit to update access

Dell NIST Cybersecurity Framework v2.0

Domain 4Objective 2

Learn About the Processes and Controls Involved in Identity Management, Authentication, and Access Control. NIST-CYBERSECURITY-FRAMEWORK-2 Practice Questions (Page 4)

Part of the NIST Framework: PROTECT Function domain, which accounts for 12% of the NIST-CYBERSECURITY-FRAMEWORK-2 exam.

29questions here

6free pages

7concepts

12%of the exam

Questions 16–20

16application · easy
An employee is leaving the company. The security team must ensure that the employee's access to all systems is removed promptly. Which process should be followed?
Select an answer first
17foundation · easy
Which access control model is best suited for an organization that needs to grant access based on a user's job function, such as 'HR Manager' or 'Network Administrator'?
Select an answer first
18foundation · easy
What is the purpose of conducting regular access reviews as part of identity and access governance?
Select an answer first
19foundation · easy
Which control is designed to prevent a single individual from having the authority to perform all steps of a critical process, such as approving and issuing a payment?
Select an answer first
20application · medium
An employee is moving from the sales department to the human resources department. What is the best practice for managing their identity and access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NIST-CYBERSECURITY-FRAMEWORK-2

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Dell Technologies. “NIST-CYBERSECURITY-FRAMEWORK-2” is a trademark of its owner, used for identification only.