A recent audit of a company’s identity management system shows that 30% of active accounts
belong to people no longer with the firm. Which of the following should be performed to help avoid
this scenario? (Select TWO).

A.
Automatically disable accounts that have not been utilized for at least 10 days.

B.
Utilize automated provisioning and de-provisioning processes where possible.

C.
Request that employees provide a list of systems that they have access to prior to leaving the
firm.

D.
Perform regular user account review / revalidation process.

E.
Implement a process where new account creations require management approval.

Explanation:
Provisioning and de-provisioning processes can occur manually or automatically. Since the
manual processes are so time consuming, the automated option should be used as it is more
efficient. Revalidating user accounts would determine which users are no longer active.