Identity and Access Management (IAM) CV0-004 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which access control model uses security labels and clearances to enforce a centralized, policy-driven access decision?

   • AMandatory Access Control (MAC)
   • BDiscretionary Access Control (DAC)
   • CAttribute-Based Access Control (ABAC)
   • DRole-Based Access Control (RBAC)
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   In Role-Based Access Control (RBAC), what is the primary advantage of assigning permissions to roles rather than to individual users?

   • AIt ensures that all users have the same level of access
   • BIt eliminates the need for authentication
   • CIt simplifies administration by grouping permissions that align with job functions
   • DIt automatically grants the highest level of access to all users
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is setting up identity federation with a partner organization. They want to allow the partner's employees to access their cloud applications, but they are concerned about security and want to ensure that only authorized partner employees can access specific resources. What is the best practice?

   • ADisable federation and create local accounts for partner employees.
   • BConfigure the federation trust to pass only necessary attributes and use policies to restrict access based on those attributes.
   • CCreate a separate federation trust for each resource.
   • DTrust all attributes provided by the partner's identity provider.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which IAM best practice involves granting users only the permissions necessary to perform their job functions?

   • ASingle sign-on
   • BMulti-factor authentication
   • CPrinciple of least privilege
   • DSeparation of duties
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A company is conducting a security audit. They find that several users have been assigned to multiple roles that grant overlapping permissions. The audit recommends reducing the risk of privilege escalation. What is the best practice to implement?

   • ARequire MFA for all users to mitigate the risk.
   • BReview and clean up role assignments to ensure users have only the roles necessary for their job functions.
   • CImplement a policy that denies all access by default.
   • DIncrease the number of roles to provide more granular permissions.
   Reveal Solution Discussion Select an answer first