Which of the following security benefits would be gained by disabling a terminated user account rather than deleting it?

A.
Retention of user keys

B.
Increased logging on access attempts

C.
Retention of user directories and files

D.
Access to quarantined files

Explanation:
Account Disablement should be implemented when a user will be gone from a company whether they leave temporary or permanently. In the case of permanently
leaving the company the account should be disabled. Disablement means that the account will no longer be an active account and that the user keys for that
account are retained which would not be the case if the account was deleted from the system.
Incorrect Answers:
B: You will not be able to log on to a disabled account.
C: The user directories and files being retained would only be beneficial for data recovery purposes.
D: Disabling a terminated user account does not make its contents quarantined. Quarantine means isolating infected files.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, Sixth Edition, Sybex, Indianapolis, 2014, p 141.