Privilege creep among long-term employees can be mitigated by which of the following procedures?

A.
User permission reviews

B.
Mandatory vacations

C.
Separation of duties

D.
Job function rotation

Explanation:
Privilege creep is the steady build-up of access rights beyond what a user requires to perform his/her
task. Privilege creep can be decreased by conducting sporadic access rights reviews, which will confirm
each user’s need to access specific roles and rights in an effort to find and rescind excess privileges.
Incorrect Answers:
B: Mandatory vacations require each employee to be on vacation for a minimal amount of time each
year. During this time a different employee sits at their desk and performs their work tasks.
C: Separation of duties divides administrator or privileged tasks into separate groupings.
D: Job function rotation allows for employees to be knowledgeable about another employee’s job
function in the event that an employee is sick or on vacation.

Stewart, James Michael, CompTIA Security+ Review Guide, Sybex, Indianapolis, 2014, pp. 81, 82, 294