A system administrator is auditing user permissions following a departmental transfer. An employee moved from the Accounting department to Human Resources but still retains write access to the Accounting file share. Which of the following identity and access management operations should be executed to resolve this issue?
- Conduct an access privilege review to adjust permissions in accordance with least privilegeAnswer
- BRequire the transferred employee to re-authenticate using multi-factor authentication
- CPlace the employee's new workstation on an internal trusted network segment behind an enterprise firewall
- DDeploy a deterrent physical control at the entry door of the Accounting department
Answer
Conducting an access privilege review to adjust permissions in accordance with the principle of least privilege.
An access privilege review allows security administrators to audit user entitlements following organizational changes, revoking obsolete rights so that access aligns with the principle of least privilege.
Step-by-Step Solution
Key Concept
Account Lifecycle Operations & Privilege Recertification