What is the correct order of the identity lifecycle management stages?

Provisioning, deprovisioning, maintenance

Deprovisioning, maintenance, provisioning

Maintenance, provisioning, deprovisioning

Provisioning, maintenance, deprovisioning

A security administrator needs to provide temporary elevated access to a production database for a developer to perform a one-time maintenance task. The administrator wants to minimize the risk of standing privileges and ensure that access is automatically revoked after the task is complete. Which approach should they use?

Create a new database admin account for the developer

Use a privileged access management (PAM) solution with just-in-time (JIT) access

Add the developer to the database admin group permanently

Provide the developer with the database admin password

A new employee joins the company and needs access to the HR system and the project management tool. According to provisioning best practices, what should the identity and access management (IAM) team do FIRST?

Create the user account and assign the permissions that match the employee's job role.

Grant the employee full access to all systems to ensure they can perform any task.

Wait for the employee to request access to each system individually before creating the account.

Create the account but do not assign any permissions until the employee's manager approves.

Which access control model uses security labels and clearances to enforce access decisions?

Role-based access control (RBAC)

Discretionary access control (DAC)

Attribute-based access control (ABAC)

CompTIASecurity+

Domain 4Objective 6

Identity and Access Management SY0-701 Practice Questions (Page 6)

Part of the Security operations domain, which accounts for 28% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 1–2 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

28%of the exam

Questions 26–30

26foundation · easy
What is the correct order of the identity lifecycle management stages?
Select an answer first
27expert · hard
A security administrator needs to provide temporary elevated access to a production database for a developer to perform a one-time maintenance task. The administrator wants to minimize the risk of standing privileges and ensure that access is automatically revoked after the task is complete. Which approach should they use?
Select an answer first
28application · medium
A company is implementing RBAC and has defined roles such as 'Sales Manager' and 'Sales Representative'. A user is both a Sales Manager and a Sales Representative. Which principle should be applied to ensure the user has the appropriate level of access?
Select an answer first
29foundation · easy
A new employee joins the company and needs access to the HR system and the project management tool. According to provisioning best practices, what should the identity and access management (IAM) team do FIRST?
Select an answer first
30foundation · easy
Which access control model uses security labels and clearances to enforce access decisions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Identity and Access Management SY0-701 Practice Questions (Page 6)

Questions 26–30

What is the correct order of the identity lifecycle management stages?

A company is implementing RBAC and has defined roles such as 'Sales Manager' and 'Sales Representative'. A user is both a Sales Manager and a Sales Representative. Which principle should be applied to ensure the user has the appropriate level of access?

A new employee joins the company and needs access to the HR system and the project management tool. According to provisioning best practices, what should the identity and access management (IAM) team do FIRST?

Which access control model uses security labels and clearances to enforce access decisions?

Keep studying — Security operations