Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Entitlement reviews. The best evidence of the effectiveness of an organization's account provisioning process is "C. Entitlement reviews." Entitlement reviews involve regularly reviewing and validating the permissions and access rights assigned to users. This process ensures that users have only the necessary access privileges and that unauthorized or excessive access is promptly identified and addressed. Effective entitlement reviews demonstrate that the account provisioning process is functioning correctly and that access rights are being appropriately managed. While the other options (user provisioning, security log monitoring, role-based access controls) are also important components of access management and security, entitlement reviews directly assess the accuracy and appropriateness of user access, making them a strong indicator of the effectiveness of the account provisioning process.
Agree with C.
User provisioning is an identity management process that ensures user accounts are created, given proper permissions, changed, disabled, and deleted. Role-based access controls (RBAC) is only one part of user provisioning. An Entitlement reviews is a review of user access permissions and other rights and is the best evidence of the effectiveness of the process.