Customer Identity and Access Management GCAD Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Under GDPR, what is a key requirement regarding customer consent?

   • AConsent must be obtained only once and never needs to be updated
   • BConsent must be freely given, specific, informed, and unambiguous
   • CConsent is implied by the customer's use of the service
   • DConsent is not required if the customer is a business
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What type of insight can CIAM analytics provide to an organization?

   • AThe organization's internal employee performance metrics
   • BCustomer login frequency and device usage patterns
   • CThe organization's financial accounting data
   • DThe organization's supply chain inventory levels
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A CIAM team wants to use analytics to reduce customer login friction while maintaining security. They have data on login success/failure, device fingerprint, IP reputation, and transaction value. Which analytics-driven approach best achieves this goal?

   • ARequire MFA for all logins regardless of risk score
   • BUse a risk-based authentication engine that evaluates device, IP, and behavior, and only prompts for MFA when the risk score exceeds a threshold
   • COnly analyze login failures to identify brute-force attempts
   • DBlock all logins from IP addresses with a poor reputation
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A large online marketplace wants to reduce support calls for password resets. Customers frequently forget their passwords and are locked out after multiple attempts. The marketplace wants a self-service solution that balances security and usability. Which option is the best fit?

   • ASend a one-time reset link to the customer's verified email address.
   • BAutomatically unlock the account after 24 hours without any verification.
   • CRequire customers to call support and verify their identity over the phone to reset the password.
   • DAllow customers to reset their password by answering a set of personal security questions.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A startup is building a consumer app and wants to allow users to register with just an email address and password. The founders want to minimize development effort while still providing a good user experience. Which CIAM capability is most important to include from the start?

   • AA full workforce IAM suite with approval workflows and manager attestation.
   • BA mandatory hardware-token enrollment step for every user.
   • CA self-service registration and login flow with email verification.
   • DA delegated administration portal for each user to manage other users.
   Reveal Solution Discussion Select an answer first