PBQ 03 · Security · CompTIA A+ 220-1202

User access hardening.

An access review found excessive privileges and inconsistent workstation protections.
Bring the office configuration into line with the approved business requirements.

Service ticket #ACCESS-03

Access review

Northstar Design is preparing its shared office workstations for a new project. Configure access for the people below while preserving the records the company must retain.

Maya Chen · Finance employee
In an ongoing role, needs to view and update Finance files, view Shared files, and has no Project work.

Theo Grant · External contractor
Needs to view and update Project files and view Shared files through October 30, 2026 only. Finance data is outside his assignment.

Jordan Reed · Departed employee
Left the company. Records and account identity must be retained for audit, with no further sign-in access.

Neither active worker performs IT administration. Anonymous or guest use is not authorized.

Company security policy

Active workers must use two independent authentication factors for sign-in.

Unattended sessions must lock within 5 minutes; resuming a locked or sleeping workstation requires authentication.

After 5 failed sign-in attempts, access must be locked for at least 15 minutes. Administrative changes must require an administrator's credentials.

Scenario date: October 19, 2026. Permissions shown are effective access; there are no inherited grants. “Modify” includes reading and editing. “Full control” also permits permission changes.

NORTHSTAR / Access consoleOffice workstation group · 4 accounts

Simulation

Identity / Directory

Accounts

Account state, group membership, and authentication settings.

Resources / Effective access

Resource Access

Assign effective access to the three company file shares.

Existing configuration loaded.

User access hardening.

Accounts

Resource Access

Workstation Policy

Saved Configuration