What step helps ensure changes to user permissions are tracked and maintained?

• A. Automatically reset all permissions daily.
• B. Audit logs are disabled.
• C. Regularly review access and disable accounts when needed.
• D. Never update permissions.

Answer: (C)

Maintaining secure access hinges on regularly checking who has which privileges and updating those rights as roles change. Regularly reviewing access and disabling accounts when they’re no longer needed creates an ongoing, auditable process for tracking permission changes. It keeps permissions aligned with current duties, reduces the risk from orphaned or overprivileged accounts, and provides a clear trail of who had access and when it was adjusted. Other approaches would either disrupt legitimate work (like resetting permissions daily), remove visibility into changes (like turning off audit logs), or allow stale access to linger (never updating permissions), all of which undermine the ability to monitor and maintain proper permissions.