Account Management GCCC Practice Questions (Page 10)

Questions 46–48

1. 46foundation · easy

   What is the purpose of periodic account reviews?

   • ATo create new accounts for employees who have changed roles
   • BTo reset all user passwords on a regular schedule
   • CTo verify that access rights remain appropriate and to detect dormant or unauthorized accounts
   • DTo monitor network traffic for suspicious activity
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A financial firm conducts quarterly access reviews. During a review, the IT team finds that a manager has access to the payroll system, which is not required for their role. The manager has been with the company for 10 years and has never used the payroll system. What is the most appropriate action?

   • ALog the access but leave it active until the next review.
   • BAsk the manager if they need access to the payroll system.
   • CKeep the access because the manager has been with the company for a long time.
   • DRemove the manager's access to the payroll system immediately.
   Reveal Solution Discussion Select an answer first
3. 48application · medium

   Your organization has a policy that privileged accounts must use MFA. A system administrator needs to perform an emergency recovery of a server that is not reachable through the normal authentication infrastructure. What is the best approach?

   • AWait until the normal authentication infrastructure is restored before performing the recovery.
   • BShare the administrator's password with another team member to perform the recovery.
   • CUse a break-glass account with a long, complex password stored in a sealed envelope and monitored after use.
   • DTemporarily disable MFA for the administrator's account to allow the recovery.
   Reveal Solution Discussion Select an answer first