Account Management GCCC Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is the best description of account provisioning?

   • AThe process of resetting passwords after a user forgets them
   • BThe process of periodically reviewing access rights to ensure they remain appropriate
   • CThe process of creating user accounts and granting initial access rights based on role and least privilege
   • DThe process of disabling accounts when employees leave the organization
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of logging account activity?

   • ATo automatically block all failed login attempts
   • BTo detect misuse, anomalies, and policy violations
   • CTo reduce the need for passwords
   • DTo improve system performance
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial analyst needs access to the company's expense reporting system. The analyst's role requires the ability to submit expense reports and approve reports for their direct reports. The system supports role-based access control. What is the best way to grant access?

   • AAssign the 'Expense Submitter' role and the 'Expense Approver' role, which together match the analyst's duties.
   • BAssign the 'Expense Administrator' role, which includes full system administration capabilities.
   • CCreate a custom role with only the 'submit' permission and manually add approval rights for each direct report.
   • DGrant the analyst direct access to the expense database to run queries and submit reports.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   During a quarterly account review, you notice that a marketing manager still has access to the HR payroll system. The manager transferred to marketing six months ago. What should you do?

   • ALeave the access in place because the manager might need it again in the future.
   • BNote the access in the review report and defer action until the next review.
   • CDisable the entire account and create a new one for the marketing role.
   • DRemove the HR payroll access immediately and document the change as part of the review.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a key activity during an account review?

   • AChecking for accounts that have not been used for a long period
   • BConfiguring firewall rules for new applications
   • CUpdating the organization's security policy
   • DInstalling antivirus software on user workstations
   Reveal Solution Discussion Select an answer first