Exam CISA topic 1 question 1795 discussion

I am pretty sure A is the correct answer as it has an expiration time. Option C says they are deleted when work is completed which is a good idea and should be done but when work is completed is very arbitrary. B doesn’t make a lot of sense. Access is provided on a need to know basis. I mean, duh. Right, they shouldn’t just access all the time whenever. Which is why I lean toward A. Because it has an expiration date so it doesn’t necessarily matter if the work got completed. They can get granted access again without it extending too long. Hopefully that makes sense to anyone else who is struggling with the options given.