Question 600
At the Ivystone national logistics provider, a terminated contractor retains a long-running private resource session after group membership removal. Which ongoing control best prevents this issue from recurring?
Explanation
Correct Answer
After implementation, the team should test session termination during leaver lifecycle audits as the appropriate recurring safeguard against the identified issue.
Incorrect Answers
That routine supports private access device posture, but the relevant ongoing risk requires the team to test session termination during leaver lifecycle audits. For the Ivystone national logistics provider, the direct corrective action is to enforce supported session revocation and identity policy re-evaluation.
Review AI guardrail detections and false positive analysis. That safeguard would help prevent recurrence of: Approved AI usage still requires defenses and audit evidence for unsafe prompt content. The risk being reviewed here is instead: An earlier authorized session must not survive materially changed access entitlement. The matching ongoing control is: Test session termination during leaver lifecycle audits.
Reconcile location-specific policy exceptions after branch additions. That safeguard would help prevent recurrence of: Different user locations should not silently change required organizational security outcomes. The risk being reviewed here is instead: An earlier authorized session must not survive materially changed access entitlement. The matching ongoing control is: Test session termination during leaver lifecycle audits.