Data Analysis & Reporting Flashcards

Which best describes an orphaned account in an identity analytics report?

Answer: An active account with no matching record in the authoritative source

Orphaned accounts lack a valid owner or HR match, so they are unmanaged risk.

What does the recertification completion rate measure?

Answer: Percentage of review items with a reviewer decision by the deadline

It shows how much of the scoped review population was actually decided.

Which pattern most strongly suggests rubber-stamping in access reviews?

Answer: Reviewers approving 100% of items within seconds

Uniform instant approvals indicate decisions were not genuinely evaluated.

A separation of duties (SoD) violation report primarily lists:

Answer: Users holding entitlement combinations that conflict by policy

SoD reports flag conflicting access pairs such as create-vendor and approve-payment.

Mean time to provision is best measured from:

Answer: Approved request to access being available in the target system

It captures fulfillment efficiency after approval.

A dormant account report typically flags accounts with:

Answer: No login activity beyond a defined threshold such as 90 days

Inactivity thresholds identify candidates for disablement.

Which elements are most important in a privileged access report for auditors?

Answer: Who accessed what, when, and under what approval or session record

Auditors need attributable, time-stamped activity tied to authorization.