Free practice · multiple-choice · hard

Practice

Review an unexpected account-change alert

An employee receives an official alert that a new recovery phone and browser session were added. Which actions belong in the response?

Account protection lifecycle

Secure access continues after a password is created

  1. OwnerUse an individual approved account
  2. AccessGrant only the current work need
  3. CredentialStore a unique secret safely
  4. MFAApprove only an expected sign-in
  5. RecoveryProtect recovery routes and sessions
  6. ReviewAct on changes, alerts, and departures

Identity, least privilege, unique credentials, MFA, protected recovery, and alert review work as one account-control system.

Choose all that apply