220-1102 Question 660
Single answerNew user/onboarding setup checklistA technician is preparing a laptop for a newly hired accounting employee who starts tomorrow. The user needs access to email, shared finance folders, a network printer, and the company VPN for occasional remote work. Company policy requires least privilege, asset tracking, and verification that the user can sign in successfully on the first day. Which step should the technician perform LAST as part of the onboarding setup checklist?
- A
Create the user account, add the user to the appropriate security groups, and assign required application access
- B
Record the laptop's asset tag and assigned user in the inventory system
- C
Test the new user's login, email, printer access, shared folder access, and VPN connectivity
- D
Grant local administrator rights so the user can install missing applications after onboarding
Show answer and explanation
Correct answer: C
Explanation
A proper new-user onboarding checklist typically includes creating the account, assigning the correct permissions and group memberships, configuring required resources, documenting the assigned device, and then validating that everything works. In this scenario, the technician should perform testing last because verification depends on the previous steps being complete. This aligns with standard IT onboarding and access-control best practices, including least privilege and proper asset management. Common enterprise guidance from Microsoft and general security best practices emphasizes assigning users only the access they need, documenting device assignments, and validating access to required services such as email, file shares, printers, and remote-access tools before handoff.
- A. Incorrect.
This is an essential onboarding step, but it is not the last one. Account creation, group membership, and application access should be completed before validation testing so the user's permissions and resources are in place.
- B. Incorrect.
Asset tracking is an important part of onboarding and supports accountability, support, and lifecycle management. However, it should be completed before final validation so the device assignment is documented prior to handoff.
- C. Correct.
This is correct because final verification should occur after the account, permissions, device assignment, and required resources have been configured. Testing sign-in and access confirms that the onboarding was completed successfully and helps prevent first-day productivity issues.
- D. Incorrect.
This is incorrect because granting local administrator rights violates least-privilege best practices unless there is a documented business requirement and approval. Standard users should receive only the permissions necessary to perform their jobs, and software deployment should be handled through approved IT processes.