Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A systems administrator is leaving the company. The security policy requires that the administrator's access be removed promptly, but the company also needs to ensure that no critical knowledge is lost. Which action best balances security and operational continuity?

   • ADisable the administrator's account immediately and transfer ownership of all critical systems and documents to another administrator before the departure.
   • BDelete the account immediately and rely on the departing administrator's personal notes for any needed information.
   • CKeep the account active for 30 days after departure so the administrator can finish pending tasks and answer questions.
   • DChange the password to a new value and share it with the team, but leave the account enabled for monitoring.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   What is the purpose of segregation of duties (SoD) in IAM?

   • ATo allow one person to perform all steps of a financial transaction
   • BTo give every employee the same level of access
   • CTo ensure that no single individual has control over all critical functions of a process
   • DTo eliminate the need for audits
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A new employee joins the company and needs access to the CRM, email, and file shares. The IT department must create the user account and assign permissions. Which process should be followed to ensure the employee gets the appropriate access?

   • AProvision the account based on the employee's role and grant the minimum permissions needed for that role.
   • BCopy permissions from a similar employee to ensure the new hire has everything.
   • CCreate the account and let the employee request additional access later.
   • DGrant full access to all systems to avoid access issues.
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A system administrator has a domain admin account that is used daily for routine tasks such as resetting user passwords and installing software. The company wants to reduce the risk of compromise of this highly privileged account. Which practice should be implemented?

   • AUse the admin account for all tasks to avoid the hassle of switching accounts.
   • BCreate a separate standard user account for routine tasks and use the admin account only for elevated tasks.
   • CShare the admin account password among the IT team for convenience.
   • DDisable the admin account and use a local administrator account on each machine.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Which practice is a key component of Privileged Access Management?

   • AGranting permanent administrative rights to all IT staff
   • BRotating privileged credentials regularly and recording session activity
   • CUsing shared accounts for all administrators
   • DStoring privileged passwords in plain text for easy access
   Reveal Solution Discussion Select an answer first