Y2-P07 · Phase 7 of 8
Access Reviews & Investigations
Conduct access reviews and investigate identity-related incidents.
Access reviewsAccess certificationsOrphaned accountsDormant accountsInvestigationsAudit evidence
Objectives
- 1.Conduct an access review campaign
- 2.Identify orphaned and dormant accounts
- 3.Investigate suspicious identity activity
- 4.Collect and preserve audit evidence
- 5.Generate an access review report
Student Outcomes
- Run access review campaigns
- Identify risky accounts
- Investigate identity incidents
- Produce audit-ready evidence
Evidence Requirements
- •Access review campaign report
- •Orphaned/dormant account inventory
- •Investigation findings
- •Audit evidence collection
Acceptance Criteria
- Student conducts access reviews
- Student identifies orphaned/dormant accounts
- Student investigates identity incidents
Evidence & Scoring
Passing: 80%
Tutor — Y2-P07
Tutor Offline. Ollama is not running. Install from ollama.com, then run
ollama serve and ollama pull llama3.1.Ask the tutor a question about your current lab.
The tutor uses progressive hints — it won't give you the answer immediately.