An organization is migrating to a cloud-based IAM solution. The security team must ensure that authentication and authorization policies are enforced consistently across on-premises and cloud applications. Which approach best achieves this consistency?

Use only on-premises IAM and manually configure cloud applications

Use a single cloud IAM provider that supports federation with the on-premises directory

Use cloud IAM only for cloud apps and on-premises IAM for on-premises apps

Maintain separate IAM systems for on-premises and cloud

An organization is implementing an IAM system to manage user identities and access. Which of the following is a primary function of IAM?

Encrypting all data stored in the organization's databases

Providing physical security for data centers

Managing digital identities and enforcing authentication and authorization policies

Monitoring network traffic for intrusions

A hospital's IT department needs to control access to electronic health records (EHR). The compliance officer insists that access decisions must be based on the specific role of the user (e.g., nurse, physician, billing clerk) and that users cannot change their own permissions. Which access control model best meets these requirements?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

A mid-sized company is implementing a new IAM system. The goal is to ensure that when an employee changes departments, their access rights are updated automatically based on their new job title. Which IAM capability is most directly responsible for this requirement?

Single sign-on (SSO) across all applications

Automated provisioning and deprovisioning based on role changes

Password reset and self-service portal

Audit logging of all access events

EC-CouncilCertified Cybersecurity Technician

Domain 2Objective 1

Identification, Authentication, and Authorization CCT Practice Questions (Page 1)

Part of the Identity and Network Security Controls domain, which makes up ~20% of our current practice bank.

48questions here

10free pages

8concepts

Questions 1–5

1expert · hard
An organization is migrating to a cloud-based IAM solution. The security team must ensure that authentication and authorization policies are enforced consistently across on-premises and cloud applications. Which approach best achieves this consistency?
Select an answer first
2application · easy
An organization is implementing an IAM system to manage user identities and access. Which of the following is a primary function of IAM?
Select an answer first
3application · medium
A hospital's IT department needs to control access to electronic health records (EHR). The compliance officer insists that access decisions must be based on the specific role of the user (e.g., nurse, physician, billing clerk) and that users cannot change their own permissions. Which access control model best meets these requirements?
Select an answer first
4foundation · easy
In a Discretionary Access Control (DAC) model, who has the authority to grant access to a resource?
Select an answer first
5application · medium
A mid-sized company is implementing a new IAM system. The goal is to ensure that when an employee changes departments, their access rights are updated automatically based on their new job title. Which IAM capability is most directly responsible for this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Identification, Authentication, and Authorization CCT Practice Questions (Page 1)

Questions 1–5

An organization is migrating to a cloud-based IAM solution. The security team must ensure that authentication and authorization policies are enforced consistently across on-premises and cloud applications. Which approach best achieves this consistency?

An organization is implementing an IAM system to manage user identities and access. Which of the following is a primary function of IAM?

In a Discretionary Access Control (DAC) model, who has the authority to grant access to a resource?

A mid-sized company is implementing a new IAM system. The goal is to ensure that when an employee changes departments, their access rights are updated automatically based on their new job title. Which IAM capability is most directly responsible for this requirement?

Keep studying — Identity and Network Security Controls