A database administrator needs to grant a new analyst read-only access to the 'sales' schema but allow the analyst to create temporary tables in a personal schema. The database uses role-based access control. What is the most appropriate configuration?

Grant the analyst SELECT on 'sales' and CREATE on the personal schema directly

Create a 'SalesReader' role with SELECT on 'sales' and a 'TempTableCreator' role with CREATE on the analyst's personal schema; grant both roles to the analyst

Grant the analyst SELECT on 'sales' and CREATE on the entire database

Grant the analyst the 'db_owner' role

A company wants to implement MFA for remote VPN access. Employees have company-issued smartphones. Which combination of authentication factors is most appropriate?

Password (knowledge) + one-time code from an authenticator app on the smartphone (possession)

Smart card (possession) + PIN (knowledge)

Fingerprint (inherence) + facial recognition (inherence)

Password (knowledge) + security question (knowledge)

Your company uses Azure AD as the identity provider. You need to allow employees to access a third-party HR application using their corporate credentials. The application supports OpenID Connect. What is the primary benefit of using OpenID Connect over SAML for this integration?

OpenID Connect is the only protocol that supports MFA

OpenID Connect provides stronger encryption than SAML

OpenID Connect does not require a shared trust relationship

OpenID Connect uses JSON Web Tokens (JWTs) that are easier to validate in modern web applications

A new employee joins the company and needs access to the HR system, the project management tool, and the corporate file share. The identity management team wants to automate the creation of the user account and the assignment of baseline permissions. Which process should be used?

Automated provisioning from the HR system, which creates the user account and assigns permissions based on the employee's role and department.

Manual creation of the account by the help desk, followed by individual requests to each system administrator.

Self-service registration, where the employee creates their own account and selects the permissions they need.

Just-in-time (JIT) provisioning, which creates the account only when the user first attempts to access a resource.

What is the primary purpose of multi-factor authentication (MFA)?

To eliminate the need for passwords

To replace biometric authentication

To simplify the login process for users

To require two or more authentication factors from different categories

GIAC Information Security Professional

Domain 3Objective 1

Identity and Access Management (IAM) GISP Practice Questions (Page 5)

Part of the Access, Testing, and Development domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 10–17 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 21–25

21application · medium
A database administrator needs to grant a new analyst read-only access to the 'sales' schema but allow the analyst to create temporary tables in a personal schema. The database uses role-based access control. What is the most appropriate configuration?
Select an answer first
22application · medium
A company wants to implement MFA for remote VPN access. Employees have company-issued smartphones. Which combination of authentication factors is most appropriate?
Select an answer first
23application · medium
Your company uses Azure AD as the identity provider. You need to allow employees to access a third-party HR application using their corporate credentials. The application supports OpenID Connect. What is the primary benefit of using OpenID Connect over SAML for this integration?
Select an answer first
24application · medium
A new employee joins the company and needs access to the HR system, the project management tool, and the corporate file share. The identity management team wants to automate the creation of the user account and the assignment of baseline permissions. Which process should be used?
Select an answer first
25foundation · easy
What is the primary purpose of multi-factor authentication (MFA)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.