Study. uk . com
  1. Home
  2. All questions
  3. Question 358

CompTIA Security+ study material · question 358 of 611

Which control corrects privilege creep, and why does the joiner process not?

  1. Password rotation, because it forces re-authentication
  2. Session limits, because they cap parallel use
  3. Automated provisioning, because it applies role templates
  4. Recertification, because creep accumulates after the account is created
Show the answer

Answer: D. Recertification, because creep accumulates after the account is created

Creep comes from role changes over time, so only a periodic review of current entitlements finds it.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › AC-2 Account Management

Challenge yourself on this topic → Study as cards