Customer Identity and Access Management GCAD Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is decommissioning a legacy customer portal and migrating users to a new platform. The company wants to ensure that users who have been inactive for more than two years are not migrated, to reduce the attack surface. However, the legal team requires that user data be retained for five years for audit purposes. What is the most appropriate action?

   • ADo not migrate inactive users to the new platform, but archive their data in a secure, access-controlled storage system for the required retention period.
   • BAnonymize inactive user data and then delete it after one year.
   • CMigrate all users, including inactive ones, to the new platform.
   • DDelete all inactive user accounts and their data immediately.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   An e-commerce platform allows customers to register with an email and password. A customer contacts support to close their account permanently. The platform must retain order history for tax compliance for seven years. The customer also requested deletion of all personal data under GDPR. What is the most appropriate action?

   • AImmediately delete the entire customer record, including order history, to honor the deletion request.
   • BExport the customer's data to a CSV file, send it to them, and then delete everything after one year.
   • CKeep the account active but mark it as 'deleted' in the database without removing any data.
   • DAnonymize the customer's personal data in the account profile, but retain order records with a pseudonymous identifier for the required period.
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   What is the primary benefit of using social login in a CIAM system?

   • AIt eliminates the need for any identity verification
   • BIt guarantees that the user is who they claim to be
   • CIt reduces registration friction by allowing users to authenticate with an existing social identity
   • DIt provides stronger security than MFA
   Reveal Solution Discussion Select an answer first
5. 39foundation · easy

   In terms of security requirements, how does CIAM typically differ from workforce IAM?

   • ACIAM must balance security with user experience, often using risk-based authentication
   • BCIAM does not need to worry about fraud because customers are external
   • CCIAM has lower security requirements because customers are not trusted
   • DCIAM requires the same security controls as workforce IAM, with no additional considerations
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   How can CIAM analytics help improve identity processes?

   • ABy eliminating the need for MFA
   • BBy providing customers with direct access to the identity database
   • CBy identifying high-friction authentication steps that cause customer drop-off
   • DBy automatically resetting all customer passwords
   Reveal Solution Discussion Select an answer first