CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
A facility wants assurance that account access on its control systems matches current personnel. Which practice most directly addresses stale or orphaned accounts?
- A.Periodic access reviews that disable accounts for departed staff and confirm remaining privileges are still warranted
- B.Allowing shared accounts so individual reviews are unnecessary because orphaned accounts cannot exist without named owners
- C.Granting all engineers identical broad rights to simplify reviews, since consequence-driven analysis needs no involvement from process engineers
- D.Setting all account passwords to never expire
Why A is correct
Stale and orphaned accounts are a common foothold, especially for departed employees and contractors. Periodic access reviews that revoke unneeded accounts and reverify remaining privileges keep the active account set aligned with current, justified need.
Know someone studying for OT Security Fundamentals? Send them this one.