Which of the following scenarios would most likely indicate an account with unnecessary access privileges, as identified by a CIEM solution?

Option A: CIEM solutions identify accounts with excessive or unused privileges, such as a developer

account with elevated access that hasn’t been used in a significant period. Such privileges pose a risk of

being exploited and should be reviewed or revoked if not necessary.

Option B: A revoked role assignment indicates proactive access management. CIEM would not flag this

as unnecessary access, as the issue has already been addressed.

Option C: Regular use of administrator accounts for their designated purpose would not typically

indicate unnecessary access privileges. However, best practices encourage limiting the scope of

administrator roles when possible.

Option D: This account demonstrates the principle of least privilege. The service account has minimal

necessary permissions, and its activity aligns with its purpose, so it would not be flagged by CIEM.