Account Management GCCC Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   Your company is implementing a new policy that requires MFA for all remote access. A group of users frequently works from home and uses VPN. What is the best way to enforce this policy?

   • AConfigure the VPN to require MFA for all remote users and enroll users in the MFA system.
   • BRequire MFA only for users who access sensitive systems, not for all remote users.
   • CAsk users to voluntarily enable MFA on their personal devices.
   • DUse a longer password policy instead of MFA to reduce the need for additional authentication.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company is implementing an automated identity management system. The system will handle account creation, modifications, and removal. The security team wants to ensure that accounts are deprovisioned promptly when employees leave. What is the most important feature to configure in the system?

   • AA password reset tool for users who forget their passwords.
   • BIntegration with the HR system to trigger deprovisioning automatically upon termination.
   • CA feature that allows administrators to create accounts quickly.
   • DA manual review process that runs every six months to identify inactive accounts.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   Which stage of the account lifecycle involves updating access rights when an employee changes roles within the organization?

   • AMaintenance
   • BProvisioning
   • CAuthentication
   • DDeprovisioning
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   Which of the following is an example of account monitoring?

   • AGranting access to a new employee
   • BChanging passwords every 90 days
   • CReviewing logs for multiple failed login attempts from a single account
   • DDeleting accounts of former employees
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A marketing employee is terminated on a Friday afternoon. The IT department is notified immediately. The employee's accounts are scheduled to be disabled the following Monday. What is the most appropriate action regarding the employee's accounts?

   • ADisable the accounts immediately upon notification, then revoke access to all systems.
   • BDisable only the email account immediately, but leave other system access active until Monday.
   • CWait until Monday to disable the accounts to allow for a smooth transition of work.
   • DChange the password and keep the account active for the weekend in case the employee needs to retrieve personal files.
   Reveal Solution Discussion Select an answer first