To properly enforce access control within environment, which of the following should be carried out?
i.Deny access to systems by undefined users or anonymous accounts.
ii. Allow unlimited usage of administrator and other powerful accounts.
iii. Suspend or delay access capability after a specific number of unsuccessful logon attempts.
iv. Remove obsolete user accounts as soon as the user leaves the company.
v. Activate inactive accounts after 30 to 60 days.
A.
i, iii, iv
B.
i, ii, iii, iv, v
C.
i, ii, iii
D.
i, iv, v
Explanation:
The following should be practiced when enforcing access control within
an environment
– Deny access to systems by undefined users or anonymous accounts.
– Limit and monitor the usage of administrator and other powerful accounts.
– Suspend or delay access capability after a specific number of unsuccessful logon
attempts.
– Remove obsolete user accounts as soon as the user leaves the company.
– Suspend inactive accounts after 30 to 60 days.