Account Management GCCC Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A user reports that they cannot log in because they have forgotten their password and have exceeded the maximum number of login attempts. The account is now locked. What is the secure recovery procedure?

   • ACreate a new account for the user and disable the old one.
   • BUnlock the account immediately and let the user try again with a new password they remember.
   • CReset the password to a temporary value and email it to the user's personal email address.
   • DVerify the user's identity through a secondary method, then reset the password and unlock the account.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A large organization has a team of 15 system administrators who all have domain admin rights. The security team wants to reduce the risk of credential misuse while maintaining operational efficiency. They are considering implementing a privileged access management (PAM) solution. Which approach best balances security and operational needs?

   • ACreate a single shared domain admin account for all administrators to use.
   • BKeep the current setup but require administrators to change their passwords every 30 days.
   • CImplement a PAM solution that requires administrators to check out privileged accounts for a limited time and records all sessions.
   • DRemove all domain admin rights and use standard user accounts for all administrative tasks.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A user's account was locked due to multiple failed login attempts. The user claims they were not trying to log in. What is the best course of action?

   • AUnlock the account without changing the password because the user is legitimate.
   • BDisable the account and require the user to create a new account.
   • CReset the password, unlock the account, and review the authentication logs for the source of the failed attempts.
   • DIncrease the lockout threshold so the user does not get locked out again.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which practice is recommended for managing service accounts?

   • AUsing the same password for all service accounts
   • BDisabling logging for service account activity
   • CProtecting credentials and monitoring usage
   • DSharing the credentials with all IT staff for convenience
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   Your organization has 5,000 employees and conducts quarterly access reviews. The reviews are done manually by each department manager using spreadsheets. The last review found that 15% of accounts had excessive permissions. The compliance team wants to reduce the risk of excessive access but the IT team has limited resources. What is the most effective improvement?

   • AImplement an automated identity governance tool that continuously compares user access to role definitions and flags anomalies.
   • BRemove all access that has not been used in the last 90 days without manager approval.
   • CRequire managers to sign a statement that they reviewed access, but do not change the process.
   • DIncrease the frequency of manual reviews to monthly instead of quarterly.
   Reveal Solution Discussion Select an answer first