Identity and Access Management SY0-701 Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   A company partners with another organization. Employees from the partner company need to access a specific application hosted by the company, but the partner company manages their own user identities. Which solution should the company implement to allow this access?

   • AProvide the partner with a VPN account to access the application
   • BEstablish a federated identity trust with the partner's identity provider
   • CCreate local user accounts for each partner employee
   • DShare the company's user directory with the partner
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company hires a new accountant. The HR system automatically creates the user account and assigns the 'Accountant' role, which grants access to the accounting software and shared folders. The IT department wants to ensure that the new employee's access is based on their job function and nothing more. Which provisioning approach should the IT department use?

   • AJust-in-time (JIT) privileged access management
   • BManual provisioning by the IT help desk
   • CAutomated provisioning based on role membership
   • DSelf-service access request portal
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company uses multiple cloud applications (e.g., Salesforce, Office 365, and Workday). Employees must remember separate passwords for each application, leading to frequent password reset requests. The company wants to improve user experience and reduce password-related support tickets while maintaining strong security. Which solution should they implement?

   • AUse the same password for all applications
   • BDeploy an identity federation solution with single sign-on (SSO)
   • CImplement a password manager for each user
   • DEnforce a longer, more complex password policy
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   An employee is transferred from the sales department to the marketing department. What is the BEST practice for updating their access rights?

   • ARemove all access and then re-add the permissions required for the new role.
   • BOnly add the new marketing permissions and leave the sales access unchanged.
   • CKeep the existing access and add the new marketing permissions.
   • DWait until the employee requests access to the marketing systems before making any changes.
   Reveal Solution Discussion Select an answer first