(ISC)2 Certified in Cybersecurity Practice Exam

True or False: An Emergency Workflow is when an administrator disables accounts immediately when a user is unexpectedly terminated.

1. True

2. False

The correct answer is: True

An Emergency Workflow refers to a predefined set of procedures that organizations implement in response to urgent situations, such as the unexpected termination of an employee. In this context, the immediate disabling of user accounts is a critical step in protecting the organization’s data and systems from potential threats posed by an individual who may have access to sensitive information. When an employee is terminated unexpectedly, it is imperative for the administrator to act swiftly to disable the user's accounts. This helps prevent unauthorized access to the organization’s systems and data, mitigating the risk of potential data breaches or insider threats. The idea is to protect the organization's assets and maintain security integrity without delay. In contrast, workflows that are more relaxed or take longer to process would not be classified as an "Emergency Workflow," as they do not prioritize immediate action in critical scenarios. Therefore, stating that an Emergency Workflow involves the immediate disabling of accounts upon unexpected termination is accurate.