Customer Identity and Access Management GCAD Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following is a primary difference between CIAM and traditional workforce IAM?

   • ACIAM does not need to support MFA, while workforce IAM does
   • BCIAM typically manages a smaller number of identities than workforce IAM
   • CCIAM is only used in B2B scenarios, while workforce IAM is used in B2C
   • DCIAM emphasizes user experience and self-service, while workforce IAM emphasizes centralized control
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A health and wellness app collects user health metrics and shares them with third-party partners for research. The app operates in the EU and serves EU residents. The product team wants to simplify the consent flow by having users accept all data sharing in one click at registration. What is the most appropriate approach?

   • AAsk for consent only once via email after registration.
   • BProvide separate consent toggles for each data-sharing purpose, with the ability to withdraw consent later through self-service.
   • CPresent a single 'Accept All' button that covers all data-sharing purposes, including research.
   • DMake consent to research sharing mandatory for app use.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company is deploying a new customer portal. They expect 2 million registered customers, with peak login traffic during holiday sales. The security team is concerned about credential stuffing attacks from botnets. The UX team insists login must be frictionless on mobile devices. Which authentication approach best balances the stated security and UX requirements?

   • ARequire a hardware security key (FIDO2) for all customer accounts
   • BDeploy SMS-based one-time passcodes (OTP) for every login attempt
   • CImplement passwordless authentication using passkeys (FIDO2/WebAuthn) with risk-based step-up MFA for high-risk transactions
   • DUse social login (Google/Facebook) as the sole authentication method
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company is integrating a third-party CIAM platform with its existing customer relationship management (CRM) system. The CIAM platform will handle authentication, while the CRM stores customer profiles and subscription data. The company wants to ensure that the CRM only receives identity data that is necessary for its functions. Which integration pattern best meets this requirement?

   • AHave the CRM call the CIAM platform's API to fetch the full profile whenever a customer record is accessed.
   • BUse a claims-based approach where the CIAM platform sends only the specific attributes the CRM needs in the authentication token.
   • CSynchronize the entire customer profile from the CIAM platform to the CRM in real time.
   • DStore a copy of all CIAM data in the CRM's database for offline reporting.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company's customer portal allows users to log in with social media accounts. The company wants to use the email address from the social provider for marketing communications. The legal team has stated that the company must obtain separate consent for marketing emails. What is the most appropriate approach?

   • AInclude a marketing consent checkbox in the social provider's own consent screen.
   • BUse the email address from the social provider for marketing emails without asking for consent.
   • CPresent a separate opt-in checkbox for marketing emails during the social login registration flow.
   • DSend marketing emails to all users who log in with social media, assuming consent by use.
   Reveal Solution Discussion Select an answer first