Which policy defines the account creation process, authority, and rights and responsibility of the user accounts?

Which policy defines the account creation process, authority, and rights and responsibility of the user accounts?

• A. Remote-Access Policy
• B. Access Control Policy
• C. User- Account Policy
• D. Information-Protection Policy

Answer: (C)

The concept being tested is how an organization governs the lifecycle and responsibilities of user accounts. The policy that directly defines how accounts are created, who has the authority to create them, and what rights and responsibilities come with those accounts is the User-Account Policy. It specifies provisioning steps, approval authority, and the duties users owe—such as password practices, acceptable use, and accountability—and it covers ongoing maintenance like modifications, deactivations, and periodic reviews. Other policies address related areas but do not define the end-to-end process for managing user accounts: Remote-Access Policy focuses on how to connect from remote locations; Access Control Policy outlines the methods and controls for granting access in general; Information-Protection Policy concentrates on protecting data and its handling.

The concept being tested is how an organization governs the lifecycle and responsibilities of user accounts. The policy that directly defines how accounts are created, who has the authority to create them, and what rights and responsibilities come with those accounts is the User-Account Policy. It specifies provisioning steps, approval authority, and the duties users owe—such as password practices, acceptable use, and accountability—and it covers ongoing maintenance like modifications, deactivations, and periodic reviews. Other policies address related areas but do not define the end-to-end process for managing user accounts: Remote-Access Policy focuses on how to connect from remote locations; Access Control Policy outlines the methods and controls for granting access in general; Information-Protection Policy concentrates on protecting data and its handling.