(ISC)2 Certified in Cybersecurity Practice Exam

What is the process of managing user identities throughout their lifecycle on a system called?

1. User Management

2. User Provisioning

3. Identity Management

4. Access Control Management

The correct answer is: User Provisioning

The process of managing user identities throughout their lifecycle on a system is best referred to as Identity Management. This encompasses all aspects of user identity from creation to deletion, ensuring that identities are accurately maintained and their use is monitored throughout their tenure with the system. Identity Management involves various critical functions such as user provisioning, which includes creating, modifying, and deleting user accounts as necessary, often based on role-based access control or organizational policies. It also includes de-provisioning processes when users leave or change roles within an organization. While User Provisioning focuses specifically on the initial setup and subsequent modifications of user accounts, it does not cover the entire lifecycle management aspect, such as authentication, authorization, and account auditing that Identity Management encompasses. Access Control Management refers specifically to the policies and processes that define and manage user permissions and accessibility to resources, but it does not handle the full cycle of user identity management. Thus, Identity Management is the most comprehensive term to describe the overall process.