CompTIA Security+ (SY0-501) — Question 753

A systems administrator has been assigned to create accounts for summer interns. The interns are only authorized to be in the facility and operate computers under close supervision. They must also leave the facility at designated times each day. However, the interns can access intern file folders without supervision.
Which of the following represents the BEST way to configure the accounts? (Choose two.)

Answer options

• A. Implement time-of-day restrictions.
• B. Modify archived data.
• C. Access executive shared portals.
• D. Create privileged accounts.
• E. Enforce least privilege.

Correct answer: A, D

Explanation

Implementing time-of-day restrictions ensures that interns have access only during approved hours, aligning with the requirement to leave at designated times. Creating privileged accounts is necessary to provide the interns access to specific resources while maintaining oversight, while modifying archived data and accessing executive shared portals are not relevant to the interns' needs, and enforcing least privilege does not adequately address the time constraints.