Customer Identity and Access Management GCAD Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A document-sharing service allows customers to share files with external collaborators. The service needs to ensure that a collaborator can only view a file if the owner explicitly grants access. Which authorization model best fits this requirement?

   • AAccess control lists on each file, where the owner manages the list of collaborators and their permissions.
   • BA single shared password for all files in the workspace.
   • CAttribute-based access control where access is granted if the collaborator's email domain matches the owner's.
   • DRole-based access control where all collaborators have a 'Viewer' role for all files in the workspace.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A company is building a CIAM solution and wants to allow customers to sign in with their existing Google or Facebook accounts. They also need to support account linking when a customer signs in with a different social provider later. Which CIAM architecture pattern supports this?

   • ARequire the customer to create a new password when using a social provider
   • BStore the social provider's user ID as the primary key in the customer database
   • CCreate a separate account for each social provider and require the customer to remember which one they used
   • DUse a single identity provider (IdP) that supports social login and account linking via a unique customer identifier
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   What is the role of an identity provider (IdP) in a CIAM architecture?

   • ATo authenticate users and provide identity information to applications
   • BTo manage the organization's internal employee database
   • CTo host the customer-facing application's frontend code
   • DTo store customer passwords in plaintext
   Reveal Solution Discussion Select an answer first
5. 49application · medium

   A customer forgets their password and requests a reset. The CIAM system must verify the customer's identity without relying on security questions (which were breached in a prior incident). The customer has a verified email address and a mobile phone number on file. Which self-service password reset method is most secure and user-friendly?

   • ASend a one-time passcode (OTP) via SMS to the verified mobile number
   • BRequire both a one-time code sent to the verified email and a one-time code sent to the verified mobile number
   • CSend a one-time reset link to the verified email address
   • DRequire the customer to answer security questions before resetting
   Reveal Solution Discussion Select an answer first
6. 50expert · hard

   A multinational company operates in the EU (GDPR) and California (CCPA). They want to use customer behavior analytics to personalize marketing. The legal team requires a single consent management solution that satisfies both regulations. The product team wants to minimize consent prompts. What is the most appropriate consent strategy?

   • AImplement a consent management platform (CMP) that presents a clear opt-in for marketing personalization (GDPR) and a separate, clear 'Do Not Sell/Share My Personal Information' link (CCPA), with consent recorded per regulation and purpose
   • BRely on legitimate interest for marketing personalization and skip consent entirely
   • COnly collect consent from EU users and ignore CCPA for California users
   • DUse a single consent banner that asks for 'marketing personalization' with a pre-checked box, and apply it globally
   Reveal Solution Discussion Select an answer first