ISC2 CISSP Practice Question

The correct answer is to implement individual named accounts with appropriate access controls. Sharing service account credentials violates the principle of accountability as actions cannot be attributed to specific individuals. Individual named accounts ensure accountability, enable proper access reviews, and maintain an accurate audit trail necessary for security and compliance.

The other options fail to address the core accountability issue: rotating passwords still allows shared access, using a password vault changes how credentials are accessed but maintains the shared model, and creating team-specific service accounts still prevents individual accountability.