A hospital wants to ensure that only healthcare providers directly involved in a patient's care can access that patient's electronic health record (EHR). The access decision is based on the patient's current care team. Which access control model best fits this requirement?

Attribute-Based Access Control (ABAC)

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

An employee is leaving the company. The IT department needs to ensure that the employee's access to all systems is removed promptly and that no orphaned accounts remain. Which process should be followed?

Delete the account immediately without any delay

Change the password and keep the account active for a month

Disable the account immediately and then delete it after a grace period

Leave the account active and monitor it for unusual activity

A company is implementing identity federation with a partner. They want to ensure that the partner's users can access their application without creating local accounts. However, they are concerned about the security of the trust relationship. Which of the following is the MOST important consideration?

Configuring the federation trust to only accept assertions from the partner's identity provider

Requiring users to use MFA on the partner's identity provider

Using the same identity provider for both companies

Ensuring the partner uses strong password policies

What is the PRIMARY purpose of privileged access management (PAM)?

To secure and control access to accounts with elevated permissions, such as administrator accounts.

To automate the creation of user accounts for new employees.

To provide all users with the same level of access to systems.

To monitor and log all user activity on the network.

An employee is on a six-month parental leave. The company wants to ensure that the employee's access is not misused while they are away, but they also want to make it easy for the employee to resume work when they return. What should the IT department do?

Delete the user account and recreate it when the employee returns

Change the password and provide it to the employee's manager

Disable the user account and re-enable it when the employee returns

Leave the account active and monitor it for unusual activity

CompTIASecurity+

Domain 4Objective 6

Identity and Access Management SY0-701 Practice Questions (Page 5)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

28%of the exam

Questions 21–25

21application · medium
A hospital wants to ensure that only healthcare providers directly involved in a patient's care can access that patient's electronic health record (EHR). The access decision is based on the patient's current care team. Which access control model best fits this requirement?
Select an answer first
22application · medium
An employee is leaving the company. The IT department needs to ensure that the employee's access to all systems is removed promptly and that no orphaned accounts remain. Which process should be followed?
Select an answer first
23expert · hard
A company is implementing identity federation with a partner. They want to ensure that the partner's users can access their application without creating local accounts. However, they are concerned about the security of the trust relationship. Which of the following is the MOST important consideration?
Select an answer first
24foundation · easy
What is the PRIMARY purpose of privileged access management (PAM)?
Select an answer first
25application · medium
An employee is on a six-month parental leave. The company wants to ensure that the employee's access is not misused while they are away, but they also want to make it easy for the employee to resume work when they return. What should the IT department do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.