Free CompTIA Security+ SY0-701 Practice Question

Regular auditing of user account permissions is indeed a best practice to confirm that users have the appropriate level of access and to identify any irregularities or violations of the principle of least privilege. However, the frequency of these audits depends on the organization's policies, the sensitivity of information, and regulatory requirements. A daily audit may not be necessary or practical for all organizations; thus, stating that it is mandatory to conduct these audits daily is misleading. The frequency should be set based on a risk-based approach.