Identity and Access Management
Question #129
After a breach involving a former employee's active account, which action should a company prioritize FIRST to prevent recurrence?
A. Mandate the use of multi-factor authentication (MFA) for all users.
B. Schedule immediate security awareness training for the HR department.
C. Limit access to sensitive data strictly to System Administrators.
D. Conduct a comprehensive review of all user accounts and their access rights.
Domain Concept: Identity and Access Management
This scenario evaluates management-level decision making in Identity and Access Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.