Which of the following practices reduces the management burden of access management?

A.
Password complexity policies

B.
User account audit

C.
Log analysis and review

D.
Group based privileges

Explanation:
Granting permissions to all members of a group is quicker than individually assigning them to each user. This means an administrator will spend less time on
assigning permissions to users who require the same access privileges.
Incorrect Answers:
A: Password complexity determines what a password should include. It will not reduce the management burden of access management.
B: User account auditing can be used to establish whether users have been suitably carrying out their work tasks or if there have been failed and/or successful
attempts at violating company policies or the law. This helps to detect unauthorized access after it has occurred.
C: Log analysis is used for reviewing audit trails and log files for evidence of policy violations, malicious events, downtimes, bottlenecks, or other issues of concern.
This helps to detect unauthorized access after it has occurred.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp 291- 294.