What is a common challenge associated with implementing Single Sign-On (SSO) in an enterprise?

It increases the number of passwords users must remember

It creates a single point of failure if the SSO service is compromised

It requires users to authenticate separately for each application

It eliminates the need for multi-factor authentication

A security team wants to monitor the use of privileged accounts. They need to know who used the admin account, when, and what commands were executed. The company uses both on-premises servers and cloud resources. Which approach provides the most comprehensive monitoring?

Implement a privileged access management (PAM) solution that records sessions and integrates with SIEM.

Enable auditing on each server and review logs manually.

Use cloud provider's native logging only.

Require administrators to log their activities in a spreadsheet.

What is the primary purpose of federated identity management?

To create a single user account for each employee

To store all user passwords in a central database

To replace all authentication methods with biometrics

To allow users to use the same credentials across multiple organizations or domains

A company's finance department has two employees who both have the ability to create vendor accounts and also approve payments. An auditor recommends separating these duties to prevent fraud. Which IAM principle should the company implement?

Multi-factor authentication (MFA)

EC-CouncilNetwork Defense Essentials

Domain 1Objective 4

Identity and Access Management (IAM) Concepts NDE Practice Questions (Page 9)

Part of the Network Security Fundamentals and Access Control domain, which makes up ~14% of our current practice bank.

47questions here

10free pages

9concepts

Questions 41–45

41foundation · easy
What is a common challenge associated with implementing Single Sign-On (SSO) in an enterprise?
Select an answer first
42expert · hard
A security team wants to monitor the use of privileged accounts. They need to know who used the admin account, when, and what commands were executed. The company uses both on-premises servers and cloud resources. Which approach provides the most comprehensive monitoring?
Select an answer first
43foundation · easy
What is the primary purpose of federated identity management?
Select an answer first
44expert · hard
A company is setting up federated identity with a partner organization. The partner uses a different identity provider (IdP). The company wants to allow its employees to access the partner's application without creating separate accounts. Which standard is most appropriate for this cross-domain authentication?
Select an answer first
45application · medium
A company's finance department has two employees who both have the ability to create vendor accounts and also approve payments. An auditor recommends separating these duties to prevent fraud. Which IAM principle should the company implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NDE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “NDE” is a trademark of its owner, used for identification only.