What is the primary goal of Privileged Access Management (PAM)?

To control, monitor, and secure access to privileged accounts

To eliminate the need for passwords entirely

To give all users administrative rights to increase productivity

To provide users with anonymous access to systems

Which standard is commonly used for exchanging authentication and authorization data between identity providers and service providers in federated identity management?

LDAP (Lightweight Directory Access Protocol)

SAML (Security Assertion Markup Language)

RADIUS (Remote Authentication Dial-In User Service)

What is the purpose of the 'deprovisioning' process in identity lifecycle management?

To disable or remove a user's access rights when they are no longer needed

To reset a user's password when they forget it

To grant additional permissions to a user who has been promoted

To authenticate a user during the login process

A company is implementing a privileged access management (PAM) solution. The security team wants to ensure that administrators can perform emergency break-glass access to critical systems, but they also want to maintain accountability and prevent misuse. Which combination of controls best achieves this?

Provide a break-glass account with a long, complex password stored in a sealed envelope, and require that its use be logged and reviewed by a security team.

Use a PAM solution that provides emergency access with automated approval workflows, session recording, and immediate password rotation after use.

Share the privileged account password among all administrators and change it monthly.

Disable all privileged accounts and require administrators to use their normal user accounts for emergency access.

Which authorization model uses attributes such as user department, resource classification, and environmental conditions to make access decisions?

Discretionary Access Control (DAC)

Role-Based Access Control (RBAC)

Attribute-Based Access Control (ABAC)

EC-CouncilNetwork Defense Essentials

Domain 1Objective 4

Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 5)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

47questions here

10free pages

9concepts

Questions 21–25

21foundation · easy
What is the primary goal of Privileged Access Management (PAM)?
Select an answer first
22foundation · easy
Which standard is commonly used for exchanging authentication and authorization data between identity providers and service providers in federated identity management?
Select an answer first
23foundation · easy
What is the purpose of the 'deprovisioning' process in identity lifecycle management?
Select an answer first
24expert · hard
A company is implementing a privileged access management (PAM) solution. The security team wants to ensure that administrators can perform emergency break-glass access to critical systems, but they also want to maintain accountability and prevent misuse. Which combination of controls best achieves this?
Select an answer first
25foundation · easy
Which authorization model uses attributes such as user department, resource classification, and environmental conditions to make access decisions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.