Question

During an access review, an auditor discovers that a database administrator who left the company four months ago still has an active account with full privileges. HR processed the termination the same day the employee departed, but the account was never disabled. Which control failure in the identity lifecycle is MOST directly responsible for this finding?

Accepted Answer

The deprovisioning process is not integrated with the authoritative HR system to trigger timely account removal

Answer

The organization uses role-based access control instead of attribute-based access control

Answer

Multi-factor authentication was not enforced on the administrator's account

Answer

The account lacked a strong password rotation policy