問題文
A departing employee's account must be prevented from logging in immediately, but the files they own must remain accessible for an audit that starts next week. Which action fits?
選択肢
- Delete the account together with its home directory, since the audit only needs the file contents and the ownership records are reconstructed automatically from the audit log when the auditors request them.
- Lock the account's password and set its login shell to one that refuses sessions, leaving the account and its file ownership intact.
- Delete the account, because removing it also transfers ownership of its files to the administrative account so that the audit can still read them.
- Change the account's numeric identifier so that it no longer matches any existing session.