An insurance company requires an account recovery process so that information created by an employee can
be accessed after that employee is no longer with the firm. Which of the following is the BEST approach to
implement this process?

A.
Employee is required to share their password with authorized staff prior to leaving the firm

B.
Passwords are stored in a reversible form so that they can be recovered when needed

C.
Authorized employees have the ability to reset passwords so that the data is accessible

D.
All employee data is exported and imported by the employee prior to them leaving the firm

Explanation:
Since a user’s password isn’t stored on most operating systems (only a hash value is kept), most operating
systems allow the administrator (or authorized person in this case) to change the value then the information/
files/documents can be accessed. This is the safest way of recovery by an authorized person and is not
dependent on those who leave the firm.