Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the main benefit of Single Sign-On (SSO) for users in an enterprise?

   • AUsers no longer need to use strong passwords
   • BUsers need to remember only one set of credentials to access multiple applications
   • CUsers can access all applications without any authentication
   • DUsers can share their passwords with colleagues
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company wants to allow its employees to access a partner's cloud application using their corporate credentials. The partner requires SAML-based federation, but the company's identity provider only supports OAuth. The company cannot change its identity provider. What should the company do?

   • AAsk the partner to switch to OAuth.
   • BDeploy an identity bridge or federation gateway that translates between OAuth and SAML.
   • CUse OAuth to directly access the partner's application.
   • DCreate separate accounts for employees in the partner's application.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is merging with another company. The security team needs to integrate the two identity systems. They want to ensure that employees from both companies can access shared resources, but they also want to maintain clear audit trails and avoid orphaned accounts. Which approach is most effective?

   • AKeep the two identity systems separate and manually grant access to shared resources.
   • BCreate a federated trust between the two identity systems, and synchronize user attributes to a common directory.
   • CUse a single sign-on solution that does not synchronize any data.
   • DCreate new accounts for all employees in a single new identity system and decommission the old systems.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's security team wants to reduce the risk of privileged account abuse. They plan to implement a solution that requires administrators to check out a temporary password for a privileged account, use it for a limited time, and then have the password automatically rotated. Which additional control is most important to complement this solution?

   • ARecording and monitoring all sessions that use the privileged account.
   • BRequiring administrators to use a personal mobile device for MFA.
   • CDisabling the privileged account outside of business hours.
   • DIncreasing the password length to 20 characters.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the principle of least privilege in IAM?

   • AUsers should be given the same access as their manager
   • BUsers should have the minimum level of access necessary to perform their job functions
   • CUsers should have all permissions by default and have them removed if misused
   • DUsers should be able to request any access they want
   Reveal Solution Discussion Select an answer first