CompTIA Security+ (SY0-501) — Question 10

A department head at a university resigned on the first day of the spring semester. It was subsequently determined that the department head deleted numerous files and directories from the server-based home directory while the campus was closed. Which of the following policies or procedures could have prevented this from occurring?

Answer options

• A. Time-of-day restrictions
• B. Permission auditing and review
• C. Offboarding
• D. Account expiration

Correct answer: C

Explanation

The correct answer is C, Offboarding, as a proper offboarding process ensures that access rights are revoked immediately upon resignation, preventing any unauthorized actions. The other options, while they may enhance security, do not specifically address the immediate need to restrict access after an employee departs.