CyberCertPrepOT Security FundamentalsOT Fundamentals: Securing Industrial Control SystemsEASYFree question
A facility wants assurance that account access on its control systems matches current personnel. Which practice most directly addresses stale or orphaned accounts?
- A.Periodic access reviews that disable accounts for departed staff and confirm remaining privileges are still warranted
- B.Setting all account passwords to never expire
- C.Allowing shared accounts so individual reviews are unnecessary
- D.Granting all engineers identical broad rights to simplify reviews
Why A is correct
Stale and orphaned accounts are a common foothold, especially for departed employees and contractors. Periodic access reviews that revoke unneeded accounts and reverify remaining privileges keep the active account set aligned with current, justified need.
Know someone studying for OT Security Fundamentals? Send them this one.