Describe a typical user lifecycle flow from onboarding to offboarding.

• A. Provision account at onboarding, assign access, monitor, review, deprovision/terminate at offboarding.
• B. Create account and never adjust.
• C. Onboarding and offboarding are identical.
• D. Access is kept indefinitely.

Answer: (A)

Managing a user’s lifecycle means giving access when someone joins, adjusting those permissions as roles evolve, and removing access when they leave. At onboarding you provision the account and grant the necessary access. As they use systems, you monitor activity and regularly review permissions to ensure they still fit the job. When someone exits or changes roles, you deprovision or terminate access to prevent lingering privileges. This end-to-end flow—provision with initial access, monitor and adjust, then deprovision at offboarding—is how a typical lifecycle works to protect security and maintain proper authorization.

Creating an account and never adjusting misses the ongoing need to update access as responsibilities change or when someone leaves. Onboarding and offboarding being identical ignores the requirement to revoke access when a person exits. Keeping access indefinitely fails to remove privileges after departure or role changes, creating unnecessary risk.