Drone exam · Security

A pilot leaves the company but their app login, VPN certificate, and cloud token remain active for months. What should the offboarding process do?

Answer

Disable or revoke the person's accounts, tokens, certificates, device access, shared secrets, and physical credentials promptly according to the organisation's access policy.

Explanation

Old access is still access. Offboarding is part of fleet security, not only an HR task.