A company recently hired you as a system administrator. You notice that some accounts that were set up for temporary employees who are no longer working at the company are currently enabled. Which of the following is the BEST thing to do?

Question

BlackTom AI · Accepted Answer

Disable the enabled temporary accounts you've noticed are enabled because an active but unneeded account represents an immediate security risk and disabling is the safest, reversible mitigation.

1) Relevant knowledge points and concepts
- Principle of least privilege and account lifecycle management: accounts should only be active while needed.
- Immediate mitigation vs long-term prevention: remove access now, implement controls later.
- Disable vs delete: disabling preserves account metadata/audit trails and allows reactivation if needed.

2) Step-by-step reasoning process
- Risk assessment: temporary accounts belonging to ex-employees may permit unauthorized access. That is an immediate threat.
- Fastest safe action: disabling the identified accounts immediately cuts access without destroying records.
- Follow-up actions should include verifying those accounts against HR/manager records, documenting the change, and implementing automation/policies to prevent recurrence.

3) (No numerical calculations required.)

4) Why the correct answer is correct
- Disabling the specific temporary accounts you’ve found is the best immediate response: it reduces risk quickly, preserves evidence and configuration for audits or potential reactivation, and can be done with minimal operational disruption. It addresses the present vulnerability while allowing for further verification.

5) Why the other options are inferior
- a. Setting expiration dates for all accounts when creating them is a good preventive policy but does not solve the current exposure; it’s a future control, not an immediate fix.
- b. Disabling all temporary accounts is overly broad and could disrupt current temporary employees who still need access; it lacks verification.
- c. Crafting a script to find inactive accounts is useful for ongoing maintenance but is slower and may delay reducing the immediate risk.

6) Conclusion
Disabling the specific enabled temporary accounts is the correct immediate action. This matches the provided correct answer: d. Disable the temporary accounts you've noticed are enabled.

A company recently hired you as a system administrator. You notice that some accounts that were set up for temporary employees who are no longer working at the company are currently enabled. Which of the following is the BEST thing to do?单项选择题

类似问题

What are user permissions?

What are user permissions?

In order to achieve the system protection, a process should access

During an audit of an internally developed, web-based purchase approval application, an IS auditor discovers that all business users share a common access profile. Which of the following is the MOST important recommendation for the IS auditor to include in the report?

What are user permissions?

An employee, Alex, needs access to a critical database containing sensitive project files. Alex's role requires read-only access to specific project folders, not full control over the entire database. What security principle is most relevant?

An auditor is reviewing whether employees who accessed the HR database last month used that access only for approved purposes. This review is most closely related to the data security principle of _____.

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单