Exam CAS-003 topic 1 question 254 discussion

job performance, How else but mando Vacay

It is not "Least privilege" for sure. The question is talking about 2 things: "undergo periodic inspections and review of certain job performance data." ....See, "and review of certain job performance data"... what best option will allow the employer to perform that part than Mandatory vacation?. So, if you just limit your comprehension of the question to " would require employers with privileged access accounts to undergo periodic inspections", yeah, you will probably choose C as your answer...but that's not it.

The answer is least privilege. They are reviewing privileged accounts to ensure they have the right access for their role. For example if someone is transferred or promoted, you would want to review their access to ensure it's not too much or too little for their job.

Mandatory vacations focus on fraudulent activity, where as this question is asking about the job performance of those with administrative privileges.

Agree with CragShield. B is the only thing it can be.

C is correct.

I think the answer is correct here. If we do a review of the users performance data (what they have done) we are better able to determine what they need, and can review their rights / limit their privileges

B. Mandatory Vacation. A background investigation is done before your employment and is supplemented by periodic security reviews. During a mandatory vacation is when privileged account access can be audited and reviewed to find discrepancies or evidence of fraud/maleficence.

A. Background investigation Just look up the definitions of "background investigation" and "least privilege"