A recent audit of a company’s identity management system shows that 30% of active accounts
belong to people no longer with the firm. Which of the following should be performed to help avoid

this scenario? (Select TWO).

A.
Automatically disable accounts that have not been utilized for at least 10 days.

B.
Utilize automated provisioning and de-provisioning processes where possible.

C.
Request that employees provide a list of systems that they have access to prior to leaving the
firm.

D.
Perform regular user account review / revalidation process.

E.
Implement a process where new account creations require management approval.