CISSP Domain 7 Compliance Maintenance Practice Test

Access More Questions

An employee is terminated without notice. Which action should occur FIRST from an identity and access management perspective?

Delete all audit logs associated with the employee Disable the employee's logical access immediately Transfer the employee's files to removable media Wait for the next scheduled access recertification

Correct Answer:

Disable the employee's logical access immediately

Explanation:

Access should be disabled immediately when employment ends to prevent unauthorized use of active credentials. Records and business data can then be preserved and transferred through controlled procedures.

Access more questions from this quiz

Continue to CISSP Domain 7 Compliance Maintenance Practice Test for more practice questions and the full quiz experience.

Access More Questions