CompTIA Security+ (SY0-501) — Question 110

During a routine audit, it is discovered that someone has been using a stale administrator account to log into a seldom used server. The person has been using the server to view inappropriate websites that are prohibited to end users.
Which of the following could best prevent this from occurring again?

Answer options

• A. Credential management
• B. Group policy management
• C. Acceptable use policy
• D. Account expiration policy

Correct answer: D

Explanation

An Account expiration policy ensures that accounts are only active for a defined period, reducing the risk of stale accounts being exploited. Credential management, group policy management, and acceptable use policies are important but do not directly prevent the use of inactive accounts from being misused.