An organization uses SSO authentication for employee access to network resources. When an employee resigns, as per the organization’s security policy, the employee’s access to all network resources is terminated immediately. Two weeks later, the former employee sends an email to the help desk for a password reset to access payroll information from the human resources server. Which of the following represents the BEST course of action?
A. Approve the former employee’s request, as a password reset would give the former employee access to only the human resources server.
B. Deny the former employee’s request, since the password reset request came from an external email address.
C. Deny the former employee’s request, as a password reset would give the employee access to all network resources.
D. Approve the former employee’s request, as there would not be a security issue with the former employee gaining access to network.
How To Pass SY0-601 Exam?CompTIA SY0-601 PDF dumps.High quality SY0-601 pdf and software. VALID exam to help you pass. |
 |
Provided answer is correct. “… for a password reset to access payroll information from the human resources server”. The password reset would give access to the server where the payroll information is located.
“Would give the employee access to all network resources.” ALL resources? Really? By resetting this one employee’s password they would have access to ALL resources? Only System Administrators have access to ALL resources.
Is this another question trying to be too clever. If the employee is locked out of network resources then he no longer can access their company email account. So the help desk would have received the password reset from their personal email account. This should violate policy for password resets. For that reason I am guessing B
Concur.