Question

You recently created several new user accounts in the Sales OU and configured them with the appropriate group membership, logon scripts, and printer access. Except for one new sales employee, all employees are actively using the account. The remaining employee will be using the account within the next two weeks.
What is best practice for the remaining unused account?

a. Leave the account active since it will be unused for only two weeks.
b. Delete the account and re-create it when the employee is ready to use it.
c. Remove the account membership to all groups.
d. Disable the account until the employee is ready to use it.

Answer 1

Answer:

d. Disable the account until the employee is ready to use it.

Explanation:

Inactive accounts usually presents vulnerability as they are readily compromised and act as targets for attacks by hackers or aggrieved ex-employees that were fired. Such accounts can be used to attack the system without anyone knowing or reporting suspected foul play since there's no one attached.

Since the user will be using the account in two weeks the best practice will be to disable the account until the employee is ready to use it.

Answer 2

Answer:

Option d. Disable the account until the employee is ready to use it.

Explanation:

The safety of a company is of paramount importance. This is especially true from the cyber security of the company. This includes all the software, all the information of the company servers. The safety of the employees depends on how secure their login details are. For example, the login passwords to the workstations are never shared. Instead, the passwords are a secret. In this respect, it will be commendable to temporarily disable the employee's account and continue as soon as he/she starts again.