Which activity is used to verify current user permissions across systems for auditing?

• A. Identity Repositories
• B. Entitlement Reviews
• C. Access Logging
• D. Contractor Database

Answer: (B)

Entitlement reviews focus on the permissions assigned to users across systems and are performed to verify that those entitlements are appropriate and aligned with policy. This activity creates an auditable record of who has what access, which auditors can examine to confirm that privileges are appropriate and that least privilege is maintained. It’s the primary method to reconcile and validate current permissions across environments, detect over-privileged or orphaned entitlements, and support compliance requirements.

Identity repositories store user identities and affiliations, but they don’t actively verify or reconcile current permissions. Access logging records who did what and when, providing an audit trail of actions, not the ongoing verification of active permissions across systems. A contractor database holds contractor information, not the authorization state of user access across platforms.