Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to implement multi-factor authentication for remote access. Employees have company-issued laptops with TPM chips and smart cards. Which combination of factors would satisfy MFA?

   • ASmart card and PIN
   • BPassword and security question
   • CUsername and password
   • DFingerprint and iris scan
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of a 'something you have' authentication factor?

   • AA password
   • BA personal identification number (PIN)
   • CA fingerprint scan
   • DA smart card
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is implementing single sign-on (SSO) for its employees to access multiple internal applications. The security team is concerned about the risk of a single compromised credential. Which additional control best mitigates this risk?

   • AUse a separate password for each application instead of SSO.
   • BImplement session timeouts and automatically log users out after 15 minutes of inactivity.
   • CRequire multi-factor authentication (MFA) at the SSO login point.
   • DUse a longer password policy with a minimum of 16 characters.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company with multiple web applications wants to reduce the number of times employees must enter their credentials each day. Employees currently have separate usernames and passwords for each application. Which solution should the company implement to allow users to authenticate once and access all applications?

   • ADeploy a password manager that auto-fills credentials for each application.
   • BUse a hardware token that stores all passwords and automatically submits them.
   • CImplement single sign-on (SSO) using a central identity provider.
   • DSynchronize passwords across all applications so users enter the same password everywhere.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which access control model is based on security labels and clearances assigned to subjects and objects?

   • AMandatory Access Control (MAC)
   • BRole-Based Access Control (RBAC)
   • CDiscretionary Access Control (DAC)
   • DAttribute-Based Access Control (ABAC)
   Reveal Solution Discussion Select an answer first