CCIS: CrowdStrike Certified Identity SpecialistDemo

Question

Which of the following statements is TRUE about the risk that stale user accounts present to an organization?

A Stale accounts are susceptible to social engineering attacks, such as phishing
B Stale accounts do not pose a threat
C Stale accounts are typically not monitored for unusual activity
D Stale accounts usually have a phone number that is no longer valid for MFA requests

Explanation

Stale accounts can remain enabled without an active owner or a meaningful baseline of legitimate use, so unauthorized activity through them may not be recognized promptly. Organizations should review, disable, or remove inactive accounts to reduce this attack surface.

Learn more

NIST SP 800-171 Rev. 3 — Account Management

CCIS: CrowdStrike Certified Identity SpecialistDemo

AstroTutor

Notes

Readiness

QuestionQ38

Community Discussion