Which term best matches the following definition: Periodic review of user entitlements by managers.

Which term best matches the following definition: Periodic review of user entitlements by managers.

• A. Self-service Requests
• B. Access Recertification
• C. Identity Synchronization
• D. Domain Definition Table (DDT)

Answer: (B)

Periodic review of user entitlements by managers is called access recertification. This process involves managers periodically examining who has which permissions and either reaffirming that those permissions are still needed or revoking any that are no longer justified. The goal is to enforce least privilege, reduce the risk of over-privileged access, and maintain compliance by ensuring that access remains appropriate as roles change or people move within the organization. Self-service requests are user-initiated requests for access, not a scheduled review. Identity synchronization refers to keeping user identities and attributes consistent across systems. A Domain Definition Table isn’t a standard term for this process. Access recertification directly captures the periodic attestation and revocation workflow described in the definition.

Periodic review of user entitlements by managers is called access recertification. This process involves managers periodically examining who has which permissions and either reaffirming that those permissions are still needed or revoking any that are no longer justified. The goal is to enforce least privilege, reduce the risk of over-privileged access, and maintain compliance by ensuring that access remains appropriate as roles change or people move within the organization.

Self-service requests are user-initiated requests for access, not a scheduled review. Identity synchronization refers to keeping user identities and attributes consistent across systems. A Domain Definition Table isn’t a standard term for this process. Access recertification directly captures the periodic attestation and revocation workflow described in the definition.