CISA Certified Information Systems Auditor – Question2441

What is an effective control for granting temporary access to vendors and external support personnel?

A.
Creating user accounts that automatically expire by a predetermined date
B. Creating permanent guest accounts for temporary use
C. Creating user accounts that restrict logon access to certain hours of the day
D. Creating a single shared vendor administrator account on the basis of least-privileged access

Correct Answer: A

Explanation:

Explanation:
Creating user accounts that automatically expire by a predetermined date is an effective control for granting temporary access to vendors and external support personnel.