Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following best describes the role of IAM in an organization's overall security posture?

   • AIt is only necessary for cloud environments, not on-premises networks
   • BIt primarily focuses on encrypting data at rest and in transit
   • CIt replaces the need for firewalls and antivirus software
   • DIt ensures that only authenticated and authorized users can access specific resources
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is reviewing its IAM policies. The security team wants to ensure that employees have only the access necessary to perform their job functions. Which practice best achieves this goal?

   • AUsing a single administrator account for all administrative tasks.
   • BGranting all employees the same default access level to simplify management.
   • CConducting regular access reviews and revoking access that is no longer needed.
   • DProviding access based on the employee's job title only, without further review.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A multinational corporation needs to control access to a document management system. Access rules must consider the user's department, clearance level, and the document's classification label. The system must enforce the label-based rules centrally, and users cannot override them. Which combination of models should be used?

   • AMAC for all access decisions and no other model.
   • BABAC for attribute-based decisions and MAC for label enforcement.
   • CRBAC for role-based decisions and DAC for owner-based sharing.
   • DDAC for owner-based control and ABAC for attribute checks.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A multinational company is implementing SSO for its employees. The company has offices in multiple countries and uses a mix of on-premises Active Directory and cloud-based SaaS applications. The security team wants to ensure that employees can use the same corporate credentials across all applications, but also wants to avoid storing passwords in the cloud. Which approach best meets these requirements?

   • AUse a cloud-based IdP and synchronize password hashes from Active Directory to the cloud.
   • BDeploy an on-premises identity provider (IdP) that federates with cloud SaaS applications using SAML, and synchronize user accounts to the cloud without passwords.
   • CUse OAuth 2.0 for all applications, but do not synchronize any user directory.
   • DCreate separate accounts in each SaaS application and use a password manager to store the credentials.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In Role-Based Access Control (RBAC), what determines the permissions a user has?

   • AThe user's individual identity and explicit permissions
   • BThe security clearance level of the user
   • CThe roles assigned to the user within the organization
   • DThe attributes of the resource being accessed
   Reveal Solution Discussion Select an answer first