Which offboarding action is a primary step to prevent continued access when an employee leaves?

• A. Archive Data
• B. Revoke Credentials
• C. Collect Devices
• D. Confirm Completion

Answer: (B)

Revoking credentials is the primary step because it directly stops authentication and prevents the employee from accessing any systems or data the moment they leave. By disabling logins, revoking tokens, and removing access rights, you cut off the ability to sign in, which is the core way to prevent continued access. Other tasks like archiving data, collecting devices, or confirming completion are important parts of offboarding, but they don’t stop access in real time. Archiving preserves information, collecting devices mitigates physical risk, and confirming completion ensures tasks are finished; none of these by themselves halt active access. So the action that most effectively prevents continued access is revoking credentials.