Customer Identity and Access Management GCAD Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a typical step in the customer identity lifecycle?

   • AIdentity proofing, background check, and clearance
   • BAccount creation, password reset, and hardware token issuance
   • COnboarding, role assignment, and periodic recertification
   • DRegistration, profile update, and deprovisioning
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A financial services company is seeing a surge in new account registrations followed by immediate high-value transactions. The fraud team suspects synthetic identity fraud, where attackers combine real and fake data to create accounts. The company wants to detect this pattern without blocking legitimate customers. Which approach is most effective?

   • AUse device fingerprinting and velocity checks to flag accounts that exhibit behavior consistent with synthetic fraud, such as multiple accounts from the same device.
   • BDelay all transactions from new accounts by 30 days.
   • CBlock all new accounts that make a transaction within 24 hours of registration.
   • DRequire all new customers to provide a notarized identity document before their first transaction.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a common security risk specific to customer identities?

   • ALack of encryption at rest
   • BInsider threat from employees
   • CAccount takeover through credential stuffing
   • DMisconfigured firewall rules
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is replacing its workforce IAM system with a CIAM platform for its customer portal. The workforce IAM uses Active Directory and requires users to be on the corporate network. The CIAM must support external customers from any network. Which change is most critical for the CIAM architecture?

   • AUse a cloud-based CIAM platform that supports self-registration, social login, and MFA, and integrate it with the application via OIDC
   • BUse the same workforce IAM but remove the network restriction
   • CKeep the Active Directory as the identity store but allow external access via VPN
   • DExpose the Active Directory to the internet for customer authentication
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A global e-commerce company is experiencing a high rate of account takeover via SMS interception. The company wants to move to a more secure authentication method but is concerned about alienating customers in regions where smartphones are less common. Which approach best balances security and accessibility?

   • ASwitch to email OTP for all customers as a replacement for SMS.
   • BImplement risk-based authentication that requires a stronger factor only when login behavior is anomalous, while allowing SMS OTP as a fallback for low-risk logins.
   • CRequire a hardware security key for all customers worldwide.
   • DContinue using SMS OTP for all customers but add a longer code validity period.
   Reveal Solution Discussion Select an answer first