Account Management GCCC Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of the deprovisioning stage in account lifecycle management?

   • ATo periodically review and adjust access rights for role changes
   • BTo disable or remove accounts that are no longer needed, reducing security risk
   • CTo enforce password complexity and multi-factor authentication
   • DTo create accounts for new employees with appropriate initial permissions
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   Your security team notices that a privileged service account is logging in at 3:00 AM from an IP address outside the corporate network. The account is used by a scheduled batch job. What is the most appropriate first response?

   • AIgnore the alert because service accounts often run at odd hours.
   • BDisable the account permanently and recreate it with a new name.
   • CChange the password and schedule the batch job to run at a different time.
   • DInvestigate the activity immediately, correlate with the batch job schedule, and disable the account if the activity is unauthorized.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A contractor's project ended on Friday, but the security team was not notified until Monday. The contractor's account remains active. What is the most immediate action to reduce risk?

   • AWait for the next scheduled account review to remove the account.
   • BChange the account password and keep the account enabled in case the contractor needs to return.
   • CDisable the account immediately and then review any activity that occurred after the project end date.
   • DDelete the account immediately and all associated files to ensure no residual access.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A legacy application uses a shared service account with a hardcoded password in the configuration file. The application is critical and cannot be easily modified. The security team wants to reduce the risk of credential theft. What is the best approach?

   • AChange the password in the configuration file and restrict file permissions to the application service account.
   • BUse a PAM solution to manage the service account password, rotate it frequently, and inject it into the application at runtime.
   • CLeave the password as is but monitor the configuration file for unauthorized access.
   • DDisable the service account and use the administrator's personal account for the application.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A legacy application requires a shared service account to access a database. The password is known to several administrators and has never been changed. What is the most effective control to reduce risk?

   • ADisable the service account and rely on the application's built-in authentication.
   • BRemove the service account and use individual user accounts for the application.
   • CChange the password once and share it only with the application team.
   • DRotate the password regularly, store it in a privileged access management (PAM) vault, and monitor usage of the account.
   Reveal Solution Discussion Select an answer first