Study. uk . com
  1. Home
  2. All questions
  3. Question 602

CompTIA Security+ study material · question 602 of 611

What must a defined account management lifecycle specify?

  1. The password complexity rules for each account type
  2. The control baseline the system was assessed against
  3. Owners, approved account types, and the conditions under which an account is disabled or removed
  4. The multi-factor method for each user
Show the answer

Answer: C. Owners, approved account types, and the conditions under which an account is disabled or removed

Without stated conditions for disabling and removal, accounts accumulate and nobody is accountable for them.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › AC-2 Account Management

Challenge yourself on this topic → Study as cards