User provisioning refers to the creation, maintenance, and deactivation of user objects and attributes as they exist in one or more systems in response to business processes. -- Reword question to avoid creating a gramar logic inference that only one item should be checked. Change question to avoid gramar confusion. E.g., Which of the following is/are not part of user provisioning. Using is implies only one of the four should be checked. ===== It looks like the questions are not properly reviewed, really confusing! *Maintenance and deactivation of user objects and attributes is NOT apart of user provisioning. It is apart of user DEprovisioning. These are two different concepts. The keyword in this is "deactivation". User provisioning has no hand in deactivation, DEprovisioning does. In the CISSP exam, deactivating and deleting are not used interchangeably. This question needs a major rework as well as the answers. I have changed one of the answers to be correct by changing it to Creation and DELETION of user accounts. This is an important concept to udnerstand EDIT: Question should be dropped.