(ISC)2 Certified in Cybersecurity Practice Exam

Which of the following actions is part of a deprovisioning process?

1. Creating new user accounts

2. Revoking access privileges

3. Setting up authentication methods

4. Assigning roles to users

The correct answer is: Revoking access privileges

The action of revoking access privileges is a critical component of the deprovisioning process. Deprovisioning refers to the process of removing user access rights and permissions when an individual no longer needs them, such as when they leave the organization or change roles. This action is essential to maintaining security, as it helps prevent unauthorized access to sensitive data and systems that could occur if an ex-employee or former user retains their credentials. During deprovisioning, the goal is to ensure that all access to systems, applications, and data is completely terminated. Revoking access privileges effectively mitigates potential security risks by ensuring that individuals do not have lingering access that could be exploited. In contrast, creating new user accounts, setting up authentication methods, and assigning roles to users are all actions associated with the provisioning process, which is about granting access and setting up accounts for new users. These activities are the opposite of deprovisioning, where the focus is on removing and securing existing access rights instead of creating or managing them.