What is the process called when an account, host, or application is removed from the production environment, including revocation of privileged access?

What is the process called when an account, host, or application is removed from the production environment, including revocation of privileged access?

• A. Termination of account
• B. Deprovisioning
• C. Decommissioning
• D. Access revocation

Answer: (B)

Deprovisioning is the process of removing accounts, hosts, or applications from production and revoking privileged access. It covers disabling or deleting user accounts, removing elevated privileges, and revoking credentials such as passwords, tokens, and keys, while also removing the associated assets from active production. This ensures there are no lingering access paths when someone leaves, changes roles, or a system or device is retired, aligning with least privilege and security policies. Decommissioning refers more to retiring hardware or software from service, not the ongoing management of access across the environment. Termination of an account is narrower, describing shutting down a single account rather than the full scope of removing multiple assets and revoking access.

Deprovisioning is the process of removing accounts, hosts, or applications from production and revoking privileged access. It covers disabling or deleting user accounts, removing elevated privileges, and revoking credentials such as passwords, tokens, and keys, while also removing the associated assets from active production. This ensures there are no lingering access paths when someone leaves, changes roles, or a system or device is retired, aligning with least privilege and security policies. Decommissioning refers more to retiring hardware or software from service, not the ongoing management of access across the environment. Termination of an account is narrower, describing shutting down a single account rather than the full scope of removing multiple assets and revoking access.