In user account management, which statement correctly describes provisioning and deprovisioning?

• A. Deprovisioning creates access; provisioning removes access.
• B. Both refer to password resets.
• C. Provisioning creates access; deprovisioning removes access.
• D. They refer to hardware provisioning only.

Answer: (C)

Access lifecycle management is about how we grant and revoke access as people's roles change or they join or leave an organization. Provisioning is the process of creating user identities and giving them the access they need—setting up accounts, assigning the right roles, and enrolling devices. Deprovisioning is the opposite: removing or revoking that access when it’s no longer appropriate, such as disabling or deleting accounts and revoking permissions to systems and data.

That same phrase captures the correct idea: provisioning creates access, deprovisioning removes access. It’s not just about password resets, which is only a small part of what provisioning can involve, and it isn’t limited to hardware setup either.