IAM Solutions CNX-001 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial services firm is implementing MFA for all remote employees. The CISO mandates that MFA must be phishing-resistant and that the solution must work with the existing SSO infrastructure. The company currently uses a SAML-based identity provider. Which MFA method should the administrator choose?

   • ASMS one-time passcodes
   • BFIDO2 security keys
   • CEmail-based verification codes
   • DAuthenticator app push notifications
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A mid-sized company is adopting SSO for its SaaS applications. The IT director wants to reduce password fatigue and improve security. The company uses Microsoft Entra ID (Azure AD) as its identity provider. Which configuration should the administrator implement to achieve this goal?

   • ASet up password synchronization for each SaaS application and require users to change passwords every 30 days.
   • BDeploy an on-premises federation server and configure each SaaS app to use LDAP directly.
   • CConfigure SAML-based federation for each SaaS application and enforce MFA with Conditional Access.
   • DCreate a separate user account in each SaaS application and use a password manager to store credentials.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A global bank is implementing a PAM solution. The security team requires that privileged sessions be isolated from the user's workstation to prevent malware from capturing credentials. The bank also requires that all sessions be recorded and that access be approved by a manager. Which PAM architecture should the administrator implement?

   • AA jump server with session recording and approval workflows.
   • BCredential vaulting with direct RDP access from the workstation.
   • CLocal admin accounts with password rotation.
   • DSSH key management with agent forwarding.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a key best practice when implementing a PAM solution?

   • ARotating privileged account passwords regularly
   • BGranting all administrators permanent access to all systems
   • CDisabling logging for privileged sessions to improve performance
   • DSharing privileged credentials among team members for convenience
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A healthcare organization is migrating its on-premises Active Directory to Microsoft Entra ID (Azure AD). The security team wants users to access both the legacy on-premises HR application and the new cloud-based CRM with a single set of credentials, while also requiring a hardware token for all administrative accounts. The HR application only supports LDAP authentication. Which solution should the administrator implement?

   • ACreate a separate user account in Entra ID for each HR application user and synchronize passwords using the Entra Connect sync engine.
   • BSet up a site-to-site VPN between the on-premises network and Azure, and instruct users to use their domain credentials for both applications.
   • CDeploy an Application Proxy in front of the HR app and configure the CRM for SAML federation with Entra ID, then enforce MFA with a hardware token for admins.
   • DInstall the HR application on an Azure VM and join it to the domain, then configure the CRM to use the same LDAP directory.
   Reveal Solution Discussion Select an answer first