Which choice below is NOT a common element of user account
administration?
A.
Establishing, issuing, and closing user accounts
B.
Authorizing the request for a users system account
C.
Tracking users and their respective access authorizations
D.
Periodically verifying the legitimacy of current accounts and access
authorizations
Explanation:
For proper separation of duties, the function of user account establishment
and maintenance should be separated from the function of initiating
and authorizing the creation of the account. User account
management focuses on identification, authentication, and access
authorizations. This is augmented by the process of auditing and otherwise
periodically verifying the legitimacy of current accounts and
access authorizations. Also, there are considerations involved in the
timely modification or removal of access and associated issues for
employees who are reassigned, promoted, or terminated, or who retire.
Source: National Institute of Standards and Technology, An Introduction
to Computer Security: The NIST Handbook Special Publication 800-12.