Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
A. Monitoring key access control performance indicators. The best approach to provide an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA) is "A. Monitoring key access control performance indicators." By monitoring key access control performance indicators, such as access revocation timeliness, organizations can identify any delays or issues in revoking access for terminated employees. This approach allows for proactive detection and remediation of access control violations. Updating multi-factor authentication (option B) and analyzing access control logs for suspicious activity (option C) are important security practices, but they may not directly address the specific concern of monitoring terminated employee access. Revising the service level agreement (SLA) (option D) might be necessary if SLA terms need adjustment, but it doesn't provide a direct early warning mechanism for access control violations.
Agree it is A. The key is the phrase "early warning". The entries in logs are after the fact, so not early.
Monitoring key access control performance indicators is the best option for providing an early warning that network access of terminated employees is not being revoked in accordance with the SLA because it directly involves tracking and assessing the effectiveness of access control measures. By regularly monitoring these performance indicators, you can identify any discrepancies or delays in revoking access for terminated employees and take corrective action. The other options are not as effective in providing an early warning for this specific issue: C. Analyzing access control logs for suspicious activity can help detect unauthorized access, but it may not provide an early warning about delays in revoking access for terminated employees. It is a reactive measure rather than a proactive one.