What activity involves continuous observation of user access and activities within the system?

• A. Monitoring
• B. Security ACL
• C. Password Change Requests
• D. IAM Program

Answer: (A)

Continuous observation of user access and activities is monitoring. It involves continuously collecting and analyzing logs of sign-ins, resource requests, and actions taken within the system to see who is doing what, when, and under which permissions. This ongoing visibility provides real-time or near-real-time insight, helps detect unusual or unauthorized behavior, supports policy enforcement, and creates an auditable trail for compliance and incident response.

Access control lists define who is allowed to access specific resources, but they don’t by themselves provide ongoing visibility into how those permissions are used. Password change requests relate to credential management, not ongoing activity monitoring. An IAM program is the broader framework that includes governance, processes, and technologies to manage identities, of which monitoring is one important activity.