What is the default behavior for revocation actions on sources with a direct connection?

• A. Periodic review and approval process
• B. Automatic deprovisioning
• C. Manual revocation only
• D. Escalation to senior management

Answer: (B)

The default behavior for revocation actions on sources with a direct connection is automatic deprovisioning. This means that when an identity or access rights are revoked, the system automatically removes those access rights from the connected source without requiring further intervention.

Automating deprovisioning is critical for maintaining security and compliance, especially in environments where timely removal of access is necessary to mitigate risks. It ensures that former employees or individuals who no longer require access are promptly stripped of their permissions, which helps prevent unauthorized access to sensitive data.

By default, automated processes such as this improve efficiency and reduce the chance of human error during manual revocation processes. This functionality is particularly important for organizations managing multiple identities and requiring stringent access control measures.

Other options, like periodic review and approval processes or manual revocation, imply an intervention that can introduce delays and potentially increase security risks. Similarly, escalation to senior management would not usually be a default action and would be reserved for exceptional cases rather than routine access management.