An employee of a retail company has been granted an extended leave of absence by...

  According to the CISSP Official (ISC)2 Practice Tests2, the best action to take when an employee is granted an extended leave of absence is to revoke access temporarily. This is based on the principle of least privilege, which states that users should only have the minimum access required to perform their job functions. Revoking access temporarily reduces the risk of unauthorized or malicious use of the employee’s account, and also preserves the account for future use when the employee returns. Blocking user access and deleting user account after six months is not a good option, as it may cause unnecessary inconvenience and data loss for the employee and the organization. Blocking access to the offices immediately is not relevant, as it does not address the issue of access to information systems and resources. Monitoring account usage temporarily is not sufficient, as it does not prevent potential misuse or compromise of the account.