Which of the following security account management techniques should a security analyst implement to
prevent staff, who has switched company roles, from exceeding privileges?

A.
Internal account audits

B.
Account disablement

C.
Time of day restriction

D.
Password complexity

Explanation:
Internal account auditing will allow you to switch the appropriate users to the proper accounts required
after the switching of roles occurred and thus check that the principle of least privilege is followed.
Incorrect Answers:
B: Account disablement will prevent staff from being able to log on in any capacity which means that they
will not be able to perform their duties.
C: Almost every operating system—server and workstation—allows you to configure WHEN an account
can have access to the system. ‘When’ is a time restraint and not switching roles. These will only make
accounts valid for certain times as per the policy.
D: Password complexity will make passwords more secure and more difficult for miscreants to break it
and log in to that user’s account.

Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, pp. 140, 154