What is the primary purpose of separation of duties (SoD) in IAM governance?

To ensure that no single individual has control over all critical functions

To automate the provisioning process

To reduce the number of passwords users need to remember

To allow users to share accounts for convenience

In a Linux operating system, what does the permission value '755' represent for a file?

Owner can read and write; group and others can only read

All users can read, write, and execute

Owner can read and execute; group and others can read, write, and execute

Owner can read, write, and execute; group and others can read and execute

What is the primary benefit of single sign-on (SSO) for users?

Users are required to use stronger passwords

Users no longer need to be authenticated at all

Users can access all resources without any authorization checks

Users only need to authenticate once to access multiple applications

A company wants to implement MFA for its VPN. Employees have company-issued laptops with TPM chips. Which MFA method is most appropriate?

Smart card (possession) + PIN (knowledge)

Password (knowledge) + certificate stored in the TPM (possession)

Password (knowledge) + security question (knowledge)

Fingerprint (inherence) + facial recognition (inherence)

A company has a network file server that stores sensitive documents. The security team wants to implement access control so that only users in the 'Finance' group can access the 'Financial Reports' folder, and they want to ensure that this policy is enforced by the operating system, not by individual file owners. Which access control implementation should be used?

Configure NTFS permissions on the folder to grant 'Finance' group 'Read' access and remove inherited permissions for other users.

Implement a MAC system with security labels on the folder and user clearances.

Use share permissions on the network share and rely on the file owners to set additional permissions.

Use a third-party DLP solution to block access to the folder for non-Finance users.

GIAC Information Security Professional

Domain 3Objective 1

Identity and Access Management (IAM) GISP Practice Questions (Page 8)

Part of the Access, Testing, and Development domain, which makes up ~31% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~29–50 in this domain), expect 10–17 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 36–40

36foundation · easy
What is the primary purpose of separation of duties (SoD) in IAM governance?
Select an answer first
37foundation · easy
In a Linux operating system, what does the permission value '755' represent for a file?
Select an answer first
38foundation · easy
What is the primary benefit of single sign-on (SSO) for users?
Select an answer first
39application · medium
A company wants to implement MFA for its VPN. Employees have company-issued laptops with TPM chips. Which MFA method is most appropriate?
Select an answer first
40expert · hard
A company has a network file server that stores sensitive documents. The security team wants to implement access control so that only users in the 'Finance' group can access the 'Financial Reports' folder, and they want to ensure that this policy is enforced by the operating system, not by individual file owners. Which access control implementation should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GISP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GISP” is a trademark of its owner, used for identification only.