Which type of access removal is associated with user inactivity?

• A. Manual removal by administrators.
• B. Automated removal based on policy conditions.
• C. Removal is contingent on approval from management.
• D. Only temporary removal until reactivation.

Answer: (B)

The type of access removal associated with user inactivity is automated removal based on policy conditions. In many identity governance and administration systems, there are policies set in place that automatically revoke access after a specified period of inactivity. This is critical for maintaining security, as it helps to ensure that user accounts that are not actively being used do not remain accessible indefinitely, reducing the risk of unauthorized access.

Automated removal significantly enhances efficiency, as manual monitoring of user activity can be resource-intensive and prone to oversight. Instead, by establishing clear criteria—such as inactivity duration—organizations can automatically manage user access in a way that aligns with security protocols and compliance requirements. This proactive approach to access management not only streamlines processes but also strengthens the overall security posture of the organization.