A hospital is implementing a new policy for its physicians: they must present a badge with a chip and enter a PIN to access the medication dispensing cabinets. Which two authentication factors are being combined, and what is the primary security benefit?

Possession (badge) and inherence (PIN); the benefit is that the PIN cannot be guessed.

Inherence (badge) and knowledge (PIN); the benefit is that the badge is unique to each physician.

Knowledge (badge) and possession (PIN); the benefit is that the system can identify the physician uniquely.

Possession (badge) and knowledge (PIN); the benefit is that compromising one factor alone does not grant access.

A company wants its employees to use their existing corporate Microsoft 365 credentials to sign in to a third-party SaaS application, without the third party ever seeing the corporate password. Which federated identity standard is specifically designed for this browser-based SSO scenario?

OAuth 2.0, which is an authorization framework that grants access tokens to third-party applications.

OpenID Connect, which is an identity layer built on top of OAuth 2.0 and returns an ID token in JSON format.

Lightweight Directory Access Protocol (LDAP), which is used for directory services and authentication against a central directory.

Security Assertion Markup Language (SAML), which exchanges authentication and authorization data between an identity provider and a service provider via XML assertions.

A system administrator needs to perform a one-time emergency database configuration change. The company policy requires that the administrator's normal user account not have elevated rights, and that the elevated access be temporary and fully auditable. Which approach best meets these requirements?

Have the administrator share the root password with the team and use it for the change.

Use a privileged access management (PAM) solution to check out a temporary administrative credential, perform the change, and then check it back in.

Create a new permanent admin account for the administrator to use only for this change.

Add the administrator's normal account to the local administrators group for the day and remove it after the change.

GIAC Information Security Professional

Domain 3Objective 1

Identity and Access Management (IAM) GISP Practice Questions (Page 4)

Part of the Access, Testing, and Development domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 10–17 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 16–20

16foundation · easy
Which of the following is an example of a possession factor for authentication?
Select an answer first
17foundation · easy
Which IAM core component is primarily responsible for ensuring that user actions can be traced back to a specific individual?
Select an answer first
18application · medium
A hospital is implementing a new policy for its physicians: they must present a badge with a chip and enter a PIN to access the medication dispensing cabinets. Which two authentication factors are being combined, and what is the primary security benefit?
Select an answer first
19application · medium
A company wants its employees to use their existing corporate Microsoft 365 credentials to sign in to a third-party SaaS application, without the third party ever seeing the corporate password. Which federated identity standard is specifically designed for this browser-based SSO scenario?
Select an answer first
20application · medium
A system administrator needs to perform a one-time emergency database configuration change. The company policy requires that the administrator's normal user account not have elevated rights, and that the elevated access be temporary and fully auditable. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.

Identity and Access Management (IAM) GISP Practice Questions (Page 4)

Questions 16–20

Which of the following is an example of a possession factor for authentication?

Which IAM core component is primarily responsible for ensuring that user actions can be traced back to a specific individual?

A hospital is implementing a new policy for its physicians: they must present a badge with a chip and enter a PIN to access the medication dispensing cabinets. Which two authentication factors are being combined, and what is the primary security benefit?

A company wants its employees to use their existing corporate Microsoft 365 credentials to sign in to a third-party SaaS application, without the third party ever seeing the corporate password. Which federated identity standard is specifically designed for this browser-based SSO scenario?

A system administrator needs to perform a one-time emergency database configuration change. The company policy requires that the administrator's normal user account not have elevated rights, and that the elevated access be temporary and fully auditable. Which approach best meets these requirements?

Keep studying — Access, Testing, and Development